A quiet monitoring desk with a wide display and a headset.

Services · Managed Security

SOC / MDR

Detection attached to the published stack, with a practiced next step.

Endpoint monitoringSentinelOne, continuously, with isolation when needed.
Email and cloudDefender 365 on phishing, ransomware, and malicious mail.
Dark webStolen credentials watched so you can act first.
Published stackHuntress SIEM and ITDR, SentinelOne, Defender 365.

Who it is for

When watching is not enough without a response.

Operators who need threats watched and acted on as part of one MSP, rather than a separate SOC vendor that does not run the help desk or the backups.

What is included

  • Huntress SIEM and ITDR
  • SentinelOne continuous endpoint monitoring
  • Microsoft Defender 365 on email and cloud
  • Dark-web monitoring for leaked credentials
  • A path into incident response in the same practice
An open laptop on a sunlit desk with clouds in the window.
SentinelOne monitors endpoints continuously.

Features and benefits

How this part of the practice runs.

Huntress SIEM and ITDR

Huntress is the SIEM and identity threat detection and response (ITDR) we run for clients, so detection is not a separate vendor from the MSP that runs IT.

Endpoint monitoring

SentinelOne continuously monitors endpoints, with real-time alerts, automatic isolation of compromised devices, and threat hunting tools.

Email and cloud detection

Microsoft Defender 365 uses threat intelligence and behavioural analysis on phishing, ransomware, and malicious mail.

Dark-web monitoring

Stolen credentials and sensitive data are watched for so the business can act before those records are used in a breach.

Tied to response

Detection is useless without a practiced next step. Incident response and CyberSecure Canada protocols sit in the same practice.

Proof

SOC / MDR is part of the Managed Security practice. Huntress SIEM and ITDR, and SentinelOne’s continuous endpoint monitoring, are published features.

Related: Managed Security · Endpoint and identity · Incident response · Backup and disaster recovery · Book an assessment

Questions

Do you run a 24/7 SOC?

24/7 technical support is a published Managed IT feature, including emergencies such as security breaches. SentinelOne monitors endpoints continuously.

Is this a SIEM product page?

We use Huntress for SIEM and identity threat detection and response (ITDR) for clients, alongside SentinelOne, Defender 365, DNS Filter, and incident response.

What happens after a detection?

See Incident response. Backups under Managed IT are the restore path if data is encrypted.

Next step

Talk about detection and response.

Call (604) 888-7904 or send an assessment request. Office hours are Monday–Friday 8:30 a.m.–5:00 p.m.; Saturday–Sunday closed.

Book an assessment