Some Common MDR/MSSP Observations After a Cybersecurity Incident

With the recent increase in ransomware attacks, we’ve helped hundreds of customers to measure residual compromise during the recovery process and interacted with several MDR/MSSPs. I have to say this is not a good situation and the vendors we have interacted with are all genuinely concerned and provided the extra help that’s required to investigate the incident and/or recover from the incident.

Here are the top reasons/takeaways we encounter from the MSSP/MDR point of view once a security incident has …

cybersecurity cybersecurity incident incident mdr mssp