EDR

Endpoint Detection and Response: Focus on the product: iiii Tech protects your devices from vulnerabilities

EDR is an advanced solution for protecting endpoints (computer hardware devices) from potential threats, based on the monitoring and collection of endpoint health data

Ensuring the availability and maintenance of the Kaspersky Endpoint Detection and Response (KEDR) platform

Handling of incidents registered by the platform

Monitoring and configuration of required rules

Securing the platform environment, updates and fixes

Response to identified incidents

Regular reporting

Increase protection efficiency

Increase control over your endpoint infrastructure and improve the quality of detection of complex threats

Automate threat detection and response without disrupting business operations

Establish processes for threat detection, incident management and response

KEDR Platform Deployment and Support

The basic service covers the deployment and configuration of the KEDR platform

Incident detection and response

The basic service includes responding to events received from the KEDR platform in accordance with accepted SLAs and periodic reporting

The Incident Handling service includes the handling of incidents based on data received from the KEDR platform and the provision of statistical reporting on the incidents that have occurred

Roles and tasks in the project

Resolving service related issues by the customer contacting SD Service
Forwarding of service-related requests from SD Service
Analysis of possible technical difficulties together with the user
Analysis of identified threats and recommendations for their elimination

Reporting to the client (monthly, quarterly, annually)

Periodic tasks of iiii Tech for KEDR platform support services

Technical solution and software project for the service provided to the client

Creation of installation packages and configuration of software and distribution of software installation packages

Testing and confirmation of the KEDR solution in the client's technical environment

Configuration of rules for the server platform

Create incident handling and response instructions, server platform configuration instructions

Installing software on workstations as part of the deployment of a new service.

One-off tasks of iiii Tech for KEDR platform support services

Confirm technical solutions and software

Resolve user/buyer licensing issues (user/supplier)

Solution for service deployment volume (number of users, number of servers)

Solution for implementation strategy (fast implementation through forced installation, fast implementation through self-service, slow implementation)

Appointment of a contact person for the service, who will be the main point of contact for further development of the service and in the event of any disruptions or incompatibilities

Immediate reporting to the vendor of any observed issues with the Endpoint Detection and Response service

Respond to SD requests related to the handling of ongoing incidents