
SOC / MDR
Detection attached to the published stack, with a practiced next step.
Who it is for
When watching is not enough without a response.
Operators who need threats watched and acted on as part of one MSP, rather than a separate SOC vendor that does not run the help desk or the backups.
What is included
- Huntress SIEM and ITDR
- SentinelOne continuous endpoint monitoring
- Microsoft Defender 365 on email and cloud
- Dark-web monitoring for leaked credentials
- A path into incident response in the same practice

Features and benefits
How this part of the practice runs.
Huntress SIEM and ITDR
Huntress is the SIEM and identity threat detection and response (ITDR) we run for clients, so detection is not a separate vendor from the MSP that runs IT.
Endpoint monitoring
SentinelOne continuously monitors endpoints, with real-time alerts, automatic isolation of compromised devices, and threat hunting tools.
Email and cloud detection
Microsoft Defender 365 uses threat intelligence and behavioural analysis on phishing, ransomware, and malicious mail.
Dark-web monitoring
Stolen credentials and sensitive data are watched for so the business can act before those records are used in a breach.
Tied to response
Detection is useless without a practiced next step. Incident response and CyberSecure Canada protocols sit in the same practice.
Proof
SOC / MDR is part of the Managed Security practice. Huntress SIEM and ITDR, and SentinelOne’s continuous endpoint monitoring, are published features.
Related: Managed Security · Endpoint and identity · Incident response · Backup and disaster recovery · Book an assessment
Questions
Do you run a 24/7 SOC?
24/7 technical support is a published Managed IT feature, including emergencies such as security breaches. SentinelOne monitors endpoints continuously.
Is this a SIEM product page?
We use Huntress for SIEM and identity threat detection and response (ITDR) for clients, alongside SentinelOne, Defender 365, DNS Filter, and incident response.
What happens after a detection?
See Incident response. Backups under Managed IT are the restore path if data is encrypted.
Next step
Talk about detection and response.
Call (604) 888-7904 or send an assessment request. Office hours are Monday–Friday 8:30 a.m.–5:00 p.m.; Saturday–Sunday closed.
