eSentire’s Multi-Signal Managed Detection and Response services offers the world’s most complete response capability. We balance high fidelity automated blocks with rapid human-led threat investigations to isolate, contain and remediate security incidents, with a Mean Time to Contain of 15 minutes.

KEY DEFINITIONS

What is MDR?

Managed Detection and Response services provide remotely delivered modern security operations center capabilities focused on quickly detecting, investigating and actively mitigating security incidents.

What is XDR?

Extended detection and response (XDR) is a technology approach that involves combining a pre-built integration of multiple security telemetry sources with analytics and response capabilities (451 Research, 2021). eSentire’s Atlas XDR platform enables our Security Operations Center (SOC) to operate more efficiently to deliver Managed Detection and Response at scale for our global customers.

What is Threat Response?

The initial incident lifecycle from threat detection to investigation to isolation, containment and remediation of a security incident before it becomes business impacting.

What is Remediation?

Part of the incident lifecycle that involves resolving a security incident and bringing the affected assets and or user accounts back to business operation/production standard.

What is Digital Forensics & Incident Response (DFIR)?

DFIR services are advisory services that help clients identify the extent of, and deal with, events and requirements such as security and IT incident investigations, forensic response and triage, and security breaches. They are typically offered by firms on a retainer-based service model, but on-demand or emergency services are also available. Services may include digital forensics investigations, root cause analysis, crime scene reconstruction and more. The results of a DFIR service should be able to bear scrutiny in a court of law.

How Will You Use My Existing Security Investments for MDR and How Locked into a Provider Will I Be?

We support “Bring your own license” (BYOL) service models for our core technology partners- Crowdstrike, VMWare Carbon Black, SentinelOne, Sumo Logic, Microsoft, and Tenable. Our best of breed technology partner approach provides you with the ability to leverage the best Endpoint, SIEM, and Cloud providers in the market and have flexibility of choice. Our customers leverage existing investments in combination with our eSentire MDR and Atlas XDR Cloud Platform. Depending on your technology roadmap, we work with you to support migration from one provider to another so that you are never locked in.

How Do You Support Open XDR?

In addition to interoperability with our technology partners, Atlas XDR is an open platform that supports ingesting data from on-prem and cloud security systems via standard logging protocols that drive threat detections, SOC investigations, and threat hunts. We also support a growing list of APIs for technologies not among our core partners such as ServiceNow, Qualys, and SolarWinds which provide network and asset context to further our platform and our analysts’ understanding of your environment, driving better investigations.

What is Your Level of Transparency in MDR Cybersecurity Investigations?

We are extremely transparent. You will get access to the same threat cases and data pertaining to the “who, what, when, where, and how” of a cyber incident as our analysts do through our Insight portal.