With our managed EDR service we defend your endpoints, every day, all year around. We continuously perform detection of adversaries, anomalies and general threats using a light weight agent.
If any alerts are detected, you are notified according to your preference - around the clock if you so will.
Using threat intelligence we can get an insight into how the adversaries target your organization and it employees. With this information we then give you a good picture of what techniques we can detect and protect you from, to ensure you have the right protection from credible threats.
Naturally, you not only want to know what are targeting you specifically since there is other threats out there as well where you might not be a specific target but rather subject to mass campaigns from adversaries.
We will of course monitor against general threats as well to detect if you are being compromised by chance or mass-campaigns.
When we detect a threat against your organization, we will first perform a qualification triage to ensure it is indeed a true positive by remotely collecting forensics artifacts from the infected system. If the system proves to be infected, you will immediately be notified to minimize the impact of the compromise.
All managed customers are automatically enrolled to the Basic level of our Incident Response Retainer to ensure you have access to forensic experts if you need it.