Kaspersky Managed Detection and Response
Continuously hunting, detecting, and responding to threats targeting your enterprise

Overview

Many businesses today struggle to find the expertise and resources needed to track down cyberthreats heading their way, and to respond appropriately. Security teams can become overwhelmed by managing systems and tools, leaving little time for thorough investigation and analysis. That’s when Kaspersky Managed Detection and Response (MDR) steps in.

Kaspersky Managed Detection and Response (MDR) delivers advanced, round-theclock protection from the growing volume of threats circumventing automated security barriers, providing relief to organizations struggling to find specialized staff or with limited in-house resources.

---

The need to proactively hunt out threats

Most security teams take an alert-driven approach to cybersecurity incidents, reacting only after an incident has already taken place. Meanwhile, new threats move in under the radar, leaving you with a false sense of security – literally. Businesses are increasingly recognizing the need to proactively hunt out threats lying undiscovered but still active within their corporate infrastructures.

---

Service highlights

Kaspersky MDR's superior detection and response capabilities are supported by one of the most successful and experienced threat hunting teams in the industry. Unlike similar offerings on the market, Kaspersky MDR leverages patented machine-learning models, unique ongoing threat intelligence and a proven track record of effective targeted attack research. It automatically strengthens your corporate resilience to cyberthreats while optimizing your existing resources and future IT security investments.

---

Additional services

A set of optional elements provided separately can be used to tailor our service functionality to your specific requirements, providing enhanced flexibility when needed.

Why choose Kaspersky MDR

How It Works

Kaspersky MDR validates product alerts to ensure the effectiveness of automatic prevention and proactively analyzes system activity metadata for any signs of an active or impending attack.

This metadata is collected via Kaspersky Security Network, and is automatically correlated in real-time with Kaspersky’s unequalled threat intelligence to identify the tactics, techniques and procedures used by attackers. Proprietary Indicators of Attack enable the detection of stealthy non-malware threats mimicking legitimate activity.

The service adapts to your infrastructure during the first 2-4 weeks, to ensure zero false positive rates, confirming with you what is legitimate and what is not.

Kaspersky MDR tiers

Kaspersky MDR features two tiers to suit the needs of organizations of every size and industries with varying IT security maturity levels.

Leading features of Kaspersky MDR

		Kaspersky Managed Detection and Response Optimum	Kaspersky Managed Detection and Response Expert
	24x7 security monitoring
	Automated threat hunting and incident investigation
	Guided and remote response scenarios
	Security health check and asset visibility
	Access to Kaspersky SOC analysts
	Single management console (Kaspersky Security Center) with dashboards and reporting
	Incident history storage	1 year	1 year
	Raw data storage	1 month	1 month
	Managed threat hunting
	Custom incident creation
	Access to the Kaspersky Threat Intelligence Portal
	API for data download

Documentation

Download the Kaspersky Managed Detection and Response Datasheet (PDF).