What We Do
How we do it
Resources
SECURITY ADVISORIES
May 11, 2022
CVE-2022-26923 - Active Directory Domain Services Elevation of Privilege Vulnerability
THE THREAT Microsoft has disclosed a new vulnerability impacting Active Directory Certificate Services (ADCS) tracked as CVE-2022-26923 (Active Directory Domain Services Elevation of Privilege Vulnerability). If exploited successfully, an authenticated attacker can escalate privileges in environments where ADCS is running on the domain. eSentire is aware of technical details and tooling [2] for…
Read More
View all Advisories →
Company
ABOUT ESENTIRE
About Us
eSentire is The Authority in Managed Detection and Response Services, protecting the critical data and applications of 1200+ organizations in 75+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events.
Read about how we got here
Leadership Work at eSentire
LATEST PRESS RELEASE
May 10, 2022
Cybersecurity Leader eSentire Introduces e3 Partner Ecosystem Transforming How Value Is Delivered to Business Leaders
Waterloo, ON, May 10, 2022— eSentire, the Authority in Managed Detection and Response (MDR), today announced the launch of its e3 partner ecosystem, representing experience, expertise, eSentire. The e3 ecosystem focuses on mapping partner engagement, productivity and overall experience to how business leaders are choosing to consume best-in-class cybersecurity services. Believing that we all have…
Read More
Partners
PARTNER PROGRAM
e3 Ecosystem
We provide sophisticated cybersecurity solutions for Managed Security Service Providers (MSSPs), Managed Service Providers (MSPs), and Value-Added Resellers (VARs). Find out why you should partner with eSentire, the Authority in Managed Detection and Response, today.
Learn more
ECOSYSTEM PARTNER RESOURCES
Apply to become an e3 ecosystem partner with eSentire, the Authority in Managed Detection and Response.
Login to the Partner Portal for resources and content for current partners.
Search
Resources
Guide

Gartner® Market Guide for Digital Forensics and Incident Response (DFIR) Services

Gartner Market Guide for Digital Forensics and Incident Response (DFIR) Services

The increasing number and severity of cybersecurity incidents has prompted growing adoption of Digital Forensics and Incident Response (DFIR) services. The Gartner Market Guide for DFIR services can aid in identifying the most suitable cyber incident response provider for your organization.

Gartner describes DFIR services as “advisory services that help clients identify the extent of, and deal with, events and requirements such as security and IT incident investigations, forensic response and triage, and security breaches. They are typically offered by firms on a retainer-based service model, but on-demand or emergency services are also available. A retainer-based service contract encompasses a wide variety of terms and conditions, and is meant to dovetail with the client organization’s documented incident response processes and procedures.”

Some key findings and recommendations of the Gartner Market Guide for Digital Forensics and Incident Response services include:

  • Most organizations are not prepared to respond to and manage cybersecurity incidents.
  • Commoditization makes it difficult for incident response buyers to understand how to select the best incident response provider for their needs and requirements.
  • An incident response retainer is not a replacement for establishing policies and procedures for handling cybersecurity incidents.
  • It is important to encourage staff across your organization to operate under the assumption that a data breach will occur.
  • You should draw on the expertise of your incident response provider to help develop and improve your cyber incident response preparedness.
  • If you have the budget, prepaying for an incident response retainer will ensure preferential response times, reduced rates, and access to services to support your requirements in case of an incident.
  • IR services are increasingly obtained via the buyer’s managed detection and response (MDR) provider or a managed security service provider (MSSP). These attached IR services are typically invoked by completing a separate statement of work.

Read the DFIR market guide to learn more about DFIR services and processes, the direction of the market and get a list of current incident response providers.

1. Market Guide for Digital Forensics and Incident Response Services By Prateek Bhajanka, Wam Voster, 21 September 2021
2. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
3. GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally, and is used herein with permission. All rights reserved.

Get The Guide

Other Recommended Resources
Guide
10 Questions to Consider When Evaluating an Incident Response Provider
READ NOW →
Webinar
Threat Briefing: Potential Cyber Threats Stemming from Russia's Invasion of Ukraine
READ NOW →
Blog
Become HIPAA Compliant Without Losing Focus from Cybersecurity
READ NOW →