SOC / MDR
Detection attached to the published stack, with a practiced next step.
Who it is for
When watching is not enough without a response.
Operators who need threats watched and acted on as part of the same B.C. MSP, rather than a separate SOC vendor that does not run the help desk or the backups.
What is included
- SentinelOne continuous endpoint monitoring
- Microsoft Defender 365 on email and cloud
- Dark-web monitoring for leaked credentials
- A path into incident response in the same practice
Features and benefits
How this part of the practice runs.
Endpoint monitoring
SentinelOne continuously monitors endpoints, with real-time alerts, automatic isolation of compromised devices, and threat hunting tools.
Email and cloud detection
Microsoft Defender 365 uses threat intelligence and behavioural analysis on phishing, ransomware, and malicious mail.
Dark-web monitoring
Stolen credentials and sensitive data are watched for so the business can act before those records are used in a breach.
Tied to response
Detection is useless without a practiced next step. Incident response and CyberSecure Canada protocols sit in the same practice.
Proof
SOC / MDR is part of the Managed Security practice. SentinelOne’s continuous endpoint monitoring is a published feature.
Related: Managed Security · Endpoint and identity · Incident response · Backup and disaster recovery · Book an assessment
Questions
Do you run a 24/7 SOC?
24/7 technical support is a published Managed IT feature, including emergencies such as security breaches. SentinelOne monitors endpoints continuously.
Is this a SIEM product page?
Detection and response are described through the published stack: SentinelOne, Defender 365, DNS Filter, and incident response.
What happens after a detection?
See Incident response. Backups under Managed IT are the restore path if data is encrypted.
Next step
Talk about detection and response.
Call (604) 888-7904 or send an assessment request. Office hours are Monday–Friday 8:30 a.m.–5:00 p.m.; Saturday–Sunday closed.