When NetSafe® Managed Detection and Response (MDR) service finds a threat, a human-led Security Operations Center (SOC) team takes immediate action on your behalf. This is a key differentiator from some service providers, which may only send an alert and leave the response to the user.
The SOC analysts don't just detect the threat, they actively respond to it.
Their actions include:
Immediate Threat Containment: NetSafe MDR’s technology, combined with 24x7 Security Operations Center (SOC) and skilled security analysts, takes immediate action to contain the threat.
This often involves:
- Isolating infected devices or endpoints to prevent the threat from spreading further within the network.
- Terminating malicious processes to halt the attack's progress and prevent further damage.
- Deleting malicious files and preventing lateral movement into other systems.
Investigation and Analysis: Analysts investigate the threat, analyzing the source, scope, and methods used by the attacker. This helps our experts understand the attack's nature and develop a comprehensive response strategy.
Client Notification and Communication: The Net Friends team will notify your designated contact person or team about the incident after containment has been initiated.
This communication includes:
- Details about the detected threat and the actions taken to contain it.
- Potential impact on the systems and data.
Remediation recommendations to prevent future attacks and strengthen the security posture.
Remediation and Ongoing Monitoring: Net Friends will assist clients with remediation efforts to remove the threat, restore affected systems, and implement preventative measures to block (or avoid) recurrence. Continuous monitoring ensures the threat actor has been fully eradicated and to identify any lingering vulnerabilities.
NetSafe MDR aims to offer rapid response times, with some reports citing an average of 27 minutes. This proactive approach is designed to stop cyberattacks before they can lead to data exfiltration or the deployment of ransomware, giving you the assurance that your data is safe.
