Managed Detection and Response
What is Managed Detection and Response?
MDR at ValueMentor is a unique blend of People, Processes & Technology perfectly crafted to deliver advanced threat detection, deep threat analytics, global threat intelligence, faster incident mitigation, and collaborative breach response on a 24×7 basis.
Our Approach
Signature layer
This tier handles malware and known patterns of attack. This layer frees up advanced layers to focus on new and unknown threats.
Advanced Threat Detection Layer
A layer with advanced threat detection technology. This layer uses AI/ML, Dynamic Analysis, and heuristic techniques to detect and sometimes automatically block attacks that signature-based tools miss.
Forensics Layer
A layer with network forensics and advanced endpoint capabilities. Network forensics tool should provide a “single pane of glass” to easily see activity from the perimeter, internal network streams & East-West traffics.
This layer provides our Analysts with the capability to Hunt for threats, Measure detection capabilities running Adversary Emulation Programs, retrieve data from specific endpoints, and get a live response to queries. They should have a full, bit-by-bit record of endpoint activity when needed. And they should be able to contain and fix problems as & when required.
Deception Layer
If any advanced threat still gets through each of the Layers above, the deception layer aids to detect Adversaries Post-breach actions & Lateral movement attempts for understanding motives & faster recovery.
Our MDR SOC Approach follows an Adaptive Layered Approach as opposed to a signature-based Defense-in-Depth Approach. An adaptive posture uses multiple layers of defenses that complement but don’t duplicate each other. In other words, each layer should both slow an attacker’s momentum, equip the Analyst to more quickly contain and resolve attacks, or ideally, both.
Conventional defense-in-depth deployments use similar signature-based detection at every layer. An attacker that can get past one layer of signature-based defense— because no signature yet exists for the tools used in that attack—has a good chance of getting past all of them.
Take a leap ahead of adversaries and leave it to the professionals to Manage the detection and response.
MDR is a service that arose from the need of organizations lacking resource capability or those who wish to be more cognizant of risks and improve their ability to detect and respond to threats. MDR aims to address this problem not just by threat detection but also by analyzing all the factors and indicators involved in an alert for a Dynamic-Non disruptive response.
