Continuously hunting,detecting and responding
to threats targeting yourenterprise

Kaspersky
ManagedDetection andResponseKaspersky MDR
Kaspersky Managed Detection
and Response (MDR) delivers
advanced, round-theclock
protection from the growing
volume of threats circumventing
automated security barriers,
providing relief to organizations
struggling to find specialized
staff or with limited in-house
resources.

The need to proactively huntout threats
Most security teams take an alert-driven approach to cybersecurity
incidents, reacting only after an incident has already taken place.
Meanwhile, new threats move in under the radar, leaving you witha false sense of security – literally. Businesses are increasingly
recognizing the need to proactively hunt out threats lying
undiscovered but still active within their corporate infrastructures.

Service highlights

Service benefits
The reassurance of knowing that you
are continuously protected against
even the most innovative threats

Kaspersky MDR's superior detection and response capabilities aresupported by one of the most successful and experienced threat
hunting teams in the industry. Unlike similar offerings on the market,
Kaspersky MDR leverages patented machine-learning models,unique ongoing threat intelligence and a proven track record ofeffective targeted attack research. It automatically strengthens yourcorporate resilience to cyberthreats while optimizing your existing
resources and future IT security investments.

Reduced overall security costs
without the need to employ a range
of in-house security specialists

Focusing expensive in-house
resources on those critical tasks thatreally require their involvement

Scalable deployment

Incident response

Fast, scalable turnkey deployment
enables an instantly matured IT security
function without the need to invest in
additional staff or expertise

Completely managed or guided incident
response provides a swift reaction
while keeping all response actions
within your full control

Superior protection

Real-time visibility

Superior protection against even themost complex and innovative nonmalware threats prevents businessdisruption and minimizes overall
incident impact

Real-time visibility across your assets
and their protection status delivers
ongoing situational awareness throughvarious communication channels

All the major advantages fromhaving your own security operations
center without having to actually
establish oneCompromise

Pre compromise

Post compromise

Known threats

Unknown threats

Containment• Prevention or automatic detection• Detect what was missed• Automated and guidedresponse• Live response

Products, alerts

Cyber threat hunting

Incident responseTime

How it works
Kaspersky MDR validates product alerts to ensure the effectivenessof automatic prevention and proactively analyzes system activity
metadata for any signs of an active or impending attack.
This metadata is collected via Kaspersky Security Network, andis automatically correlated in real-time with Kaspersky’s unequalled
threat intelligence to identify the tactics, techniques and procedures
used by attackers. Proprietary Indicators of Attack enable thedetection of stealthy non-malware threats mimicking legitimateactivity.
The service adapts to your infrastructure during the first 2-4 weeks,
to ensure zero false positive rates, confirming with you what islegitimate and what is not.

Supported products

Kaspersky MDR tiers
Kaspersky MDR features two tiers to suit the needs of organizationsof every size and industries with varying IT security maturity levels.

Automated threat
hunting in MDR Optimum
Automated threat hunting included
in MDR Optimum uses automatic
detections based on proprietary
Indicators of Attack (IoA). These
detections are made on real-time andhistorical telemetry, and are used by
our SOC analysts to further identify,
validate and investigate threats.
Kaspersky SOC uses 700+ proprietary
Indicators of Attack covering 100%of all known adversarial Tactics,
Techniques and Procedures (TTPs).

Managed threat hunting
in MDR Expert
At the same time, managed threat
hunting in MDR Expert relies on thepainstaking, hands-on efforts of ourexperienced threat hunters and is
tailored to your specific infrastructure.
Our threat hunting team proactively
hunts out previously unknown TTPs
that do not result in automatic
detection. If such TTPs are identified,
the team develops new or adjusts
existing Indicators of Attack for future
use in both MDR tiers.

Flexible services
A set of complementary
optional elements tailor thefunctionality of the service
to your specific requirements,
providing enhanced flexibility
when needed.
• Compromise assessment• Hands-on training for SOC
analysts• Incident response retainer• Tabletop exercise

Optimum
Kaspersky MDR Optimum instantly raises your IT security
capability without the need to invest in additional staff
or expertise and provides resilience to evasive attacks
through its fast, turnkey deployment.
• 24x7 security monitoring• Automated threat hunting andincident investigation• Guided and managed responses• Access to Kaspersky SOC analysts• Security health check and asset
visibility• Single management console(Kaspersky Security Center)• 1-year incident history storage• 1 month raw data storage

ExpertKaspersky MDR Expert includes all the features of Optimum
and provides extended functionality and flexibility formature IT security teams, enabling them to offload incident
triage and investigation processes to Kaspersky and focus
their limited in-house IT security resources on reacting
to the critical outcomes delivered.
• 24x7 security monitoring• Automated threat hunting andincident investigation• Guided and managed responses• Access to Kaspersky SOC analysts• Security health check and asset
visibility• Single management console(Kaspersky Security Center) withdashboards and reporting• 1-year incident history storage

Only in Expert• 3-month raw data storage• Managed threat hunting• Custom incident creation• Access to the Kaspersky ThreatIntelligence Portal• API for data download

Leverage Kaspersky's uniqueexpertise
Countering targeted attacks requires extensive experience as well as
constant learning. As the first vendor to establish, almost a decadeago, a dedicated center for investigating complex threats, Kaspersky
has detected more sophisticated targeted attacks than any othersecurity solution provider.
Kaspersky Managed Detection and Response maximizes the valueof your Kaspersky security solutions by delivering a fully managed,individually tailored ongoing detection, prioritization, investigation
and response. As a result, it allows you to gain all the major benefits
from having your own security operations center without having toactually establish one.

Protect your business with Kaspersky MDR

Kaspersky
Managed Detection
and Response
Learn more

www.kaspersky.com© 2022 AO Kaspersky Lab.
Registered trademarks and service marks
are the property of their respective owners.

#kaspersky#bringonthefuture