Managed Detection and Response

An MDR service provides an organisation with the tools, expertise, and processes it needs to effectively protect itself from cyber threats Specifically, MDR detects and responds to cyber threats across the entirety of an organisation’s network infrastructure, including network devices, servers, domain controllers, applications, databases, endpoints, and more

The management side of MDR refers to the service that Wizard Cyber provides. Our job is to manage the entire detection and response process for an organisation We control the tools, process, and personnel, as well as managing all the technology and alerts on behalf of a business

We then report on any threats and specific action required by the organisation, as well as providing advanced data and analytics to them on a real-time basis

MDR works by proactively monitoring an organisation’s network infrastructure for any indications of a cyber threat or attack. By constantly ingesting and analysing data, our MDR service is able to collate and identify attacks based on state-of-the-art threat intelligence, playbooks, and internal threat data

Threat analysis and investigation is conducted to identify the best way of responding to the threat. Threats are then triaged and assigned to specific tiers within our global SOC. Responses range from automated processes, handled by machine learning and artificial intelligence, to advanced and carefully considered options that are recommended by senior cyber security experts

Once a response is decided upon, the threat is quickly quarantined to avoid any possible damage or disruption to the organisation’s operations

MDR protects against a vast number of cyber threats This list covers some of the most common use cases of MDR, but there are many more than we can display here:

• Malware – The most common attack vector utilised by cybercriminals, malware is used to harvest credentials, extort money, and cause data breaches
• Zero-day Attacks – Made up of previously unknown threats, zero-day attacks can cause havoc for unprepared organisations
• Phishing – Employees can easily fall victim to phishing attacks, often in the form of email or SMS requests for information or login details
• Credential Access – Credential harvesting threats are numerous and come in a variety of forms, designed to steal account names and passwords
• Data Breaches – The highest value target for cybercriminals is large databases, and many of their attacks are focused on breaching and exfiltrating them
• Trusted Host Attacks – Targeting servers, workstations, laptops, and other endpoints is a favoured technique for attackers to access your network