Top Managed Detection and Response Questions and Answers

I’ll start with the Gartner definition: MDR services provide you with remotely delivered modern security operation functions. This allows you to quickly detect, investigate and actively respond to threats through threat mitigation and containment.

An MDR provider can work as your security operations team or be an additional resource to your current team to stop threats from getting in.

With Pondurance MDR, you’ll get a dedicated team of U.S.-based elite analysts working 24/7 to protect your business from cyber threats, while reducing the number of alerts your team has to handle.

We have the technology and people, and we integrate with your existing team and tools, and work to continuously reduce your cyber risk over time.

Our team can be up and running in weeks, accelerating your plans while maximizing your resources and budget.

There are many providers on the market and many options when shopping for a cybersecurity solution. With Pondurance MDR:

• Your data is your data, and you have full access to it at all times. This means you get access to the same SIEM tools as our analysts.
• We provide guided personalized recommendations tailored to your specific cybersecurity needs. We’re not one size fits all!
• All of our analysts are U.S. citizens and our SOCs are based in the U.S. Your data will never leave the US border.
• Our strong cybersecurity consulting practice enhances your MDR because we know the difference between compliance and security
• We integrate with your existing security control investments so you don’t need to rip and replace!
• We will also provide end-to-end management of leading endpoint detection and response platforms, like CrowdStrike and SentinelOne.

If you want more information on how we can fit with your current set-up, reach out to us to talk to an expert. No hard sells. We promise!

Yes! We can ingest data across endpoint, network, log and cloud environments. 

This includes: 

• Remote laptops, tablets, mobile devices and desktops
• Data centers
• Machines in your office
• Data from cloud environments like AWS, Azure and Google Cloud Platform
• Software-as-a-service data
• Office 365 data 

We call this 360° visibility as we can ingest any data you would like us to monitor for a potential threat! With this added security, you will truly have a modern security program.

Our MDR platform, SCOPE, analyzes billions of events, surfacing any perceived threats to our analysts for confirmation and validation.

Since perceived threats are generated by technology, which is not always 100% accurate, we have real live U.S.-based human analysts review them. They use their knowledge and tool sets that are unavailable to automated systems.

Analysts verify each perceived threat as either a false positive or an actual threat. Only the actual threats are reported to you, greatly reducing your alert fatigue.

All actual threats are communicated to you through SCOPE with insights and context describing what was found, where it was found, how it was found, and what needs to happen next.

If there is a preapproved response action, we will take it immediately. Often, that’s containment of a device to stop the spread of a threat. No one wants to let a ransomware attack sit untouched!

If needed, we also provide full incident response services for any declared events as well as an option for an incident response retainer.

When seconds count, we’re there to combat any threats.

We know that you want to get up and running with MDR quickly!

Once you sign up with us, you will be assigned to one of our implementation teams with both project management and technical professionals. They will quickly and efficiently get you up and running in about four to six weeks.

During this time, we provide all tools, analytics, cloud setup and account access, and we’ll walk you through internal deployments of hardware and virtual components including log forwarders and agents.

You’ll be up and running quickly and will enjoy the added security of Pondurance MDR!