Managed XDR & SOC with Remote Access

My company is currently doing POC with a MSP and vendor that can provide managed XDR and SOC. I know that agents will need to be installed on our endpoints (both server and end-users), and the MSP team would have some kind of access to our endpoint to mitigate/block/collect stuff via the XDR system, but---

---long story short, today they find some high severity "dangerous file" on one of our endpoint, and from their RCA/report, I just realized they're able …

access block can collect cybersecurity doing end endpoint endpoints kind managed msp poc remote access server soc team vendor xdr