Microsoft Defender for Endpoint (EDR) for Critical Insight Managed Detection and Response (MDR)

With remote working now the norm for many organizations, information security teams are scrambling to secure their rapidly expanding remote workforces. While perimeter security is still important, employees with access to sensitive data could be working from anywhere. The increased focus on zero trust architecture means taking a closer look at the endpoint.

Same Critical Insight MDR, but Now with EDR for Microsoft

The Critical Insight Managed Detection and Response (MDR) service has long been technology agnostic, meaning that we monitor our customers’ environments regardless of which preventive controls and technologies are in place. Our MDR solution includes capabilities to monitor corporate networks, cloud, and SaaS.

Endpoint security is no exception, and we have successfully defended customers with everything from traditional signature-based anti-virus software to “next generation” endpoint protection. While we will continue to serve our customers across all these technologies, we are now offering something more: endpoint detection and response (EDR) with Microsoft Defender for Endpoint.

How Defender for Endpoint with Managed Detection and Response Works

Our new Defender for Endpoint integration, when coupled with our Critical Insight MDR platform, alerts Critical Insight Security Analysts of suspicious activity while supporting hunting and investigation activities. Defender's isolation capabilities are being integrated into our Critical Insight Rapid Quarantine (CIRQ) offering, enhancing our ability to quickly contain malicious activity in alignment with playbooks that we develop with our customers.

Why did we choose Microsoft Defender for Endpoint?

Not only does Microsoft Defender for Endpoint have the market share within the Microsoft ecosystem, but its tight integration with the Microsoft OS also make its effectiveness and ease of deployment hard to match. Microsoft’s Defender for Endpoint performs well in Gartner’s Magic Quadrant and has quickly attained significant market share while demonstrating exceptional execution.

Our own offensive security team tells us Defender one of the most difficult endpoint protection solutions to evade. While our existing integration with Microsoft’s MCAS solution has provided the ability to monitor Office 365 environments, the Defender for Endpoint integration enhances our visibility into the endpoint.

Get More Visibility with the Critical Insight Suite of Solutions

Critical Insight's new Defender for Endpoint integration helps round out our 24/7 detection and response offering, giving us complete visibility into our customers’ environments, whether it’s a physical network, cloud environment, zero-trust workforce, or any combination of the above.

Critical Insight is pleased to offer early access to this expanded MDR solution with Defender for Endpoint with qualified customers that will benefit most from 24x7 SOC coverage of their endpoint security. Contact us here for more information.

Resources:

• Securing against Cybersecurity attacks in Microsoft Azure
• Azure Cloud Managed Cybersecurity