Traditionally, MSSPs primarily help with detection, providing alert prioritization and reduction. They do not investigate or respond to incidents. Those functions are left to in-house customer security teams. MSSPs may provide other services such as device management, log retention or reporting functions.MDR providers are specialists in detecting advanced threats and offer a variety of response services. Their deep expertise is not readily available in house or from an MSSP, and includes threat hunting, advanced malware analysis, forensics and security research.