Go further in your endpoint detection and response efforts by adding an experienced team that can leverage your investment in Defender for Endpoint to continuously monitor your alerts, detect and investigate validated threats, hunt for malicious behavior that may have been missed, and fully remediate confirmed incidents.

Kroll Responder for Microsoft Defender for Endpoint leverages Azure Lighthouse to remotely monitor, hunt and respond to threats in your Defender for Endpoint instance while supplementing with Kroll’s unrivaled IR experience and frontline intelligence to detect previously unknown threats.

As well as enhancing visibility of attacks targeting the endpoint, our response goes as far as you need it to, closing the gap between merely containing the threat to actively removing it across all affected endpoints and quickly understanding the root cause, to ensure it doesn’t happen again.

Key benefits:

• Earlier insight into targeted threats from our frontline intelligence – Our MDR service consumes and applies frontline threat intelligence into our detections in near real-time from 1000s of cyber incidents handled by our investigators every year.
• Complete Response leveraging real DFIR experts at no extra cost – we bring in our seasoned Digital Forensics & Incident Response investigators as part of our ongoing service, so we can go beyond just containing a threat to quickly understand the root cause and remotely remediating across all affected systems.
• Proactively hunting for threats that have bypassed your controls - Our EDR experts use their knowledge of the latest tactics and techniques used by cybercriminals to create custom watchlists that help identify emerging threats that traditional endpoint solutions miss.
• £1m incident protection warranty – We’re so confident in our ability to improve your security posture that we include a $1m Incident Protection warranty at no extra cost if your service includes EDR. In the covering the costs related to a range of potential cyber incidents, including ransomware, BEC, compliance and regulatory failures, as well as business income loss.