Mandiant Managed Defense Reviews & Insights

We used this product for managed security to help prevent and protect against cyber attacks or security breaches.

We’ve used other providers who didnt seem to be as affective, in addition to sending tonnnns of faulty alerts. When an alert is received on Mandiant, it’s a legitimate alert/threat.

We were looking for Managed Detection & Response solution for our customer as there was issues on clarity of threats , which can not be define Bad & Good by even best technology available in market. MDR services can be a cost effective way to access the necessary detection & response skills and resources without having to recruit, train and retain the internal talent.

Rapid identification & Neutralization : The Madiant Rapid Response team will get work right away often within hours to identify and eject the adversary . Others Vendor takes days.
Post Incidents Threat Summary: Mandiant provide formal summary of its investigation, detailing the actions it took & discovery it made as well as recommending long term guidance on how to mitigate the recurrence of similar threats in future .
Also provide ongoing detection & response.

We use it to monitor our network and infrastructure servers, including firewalls, routers, switches, load balancers and proxies. It protects our organisation from advanced and emerging threats

It is good for threat monitoring and threat remediation. It proactively hunts for attackers across the entire infra. There is also training for infra team

Antivirus, while a good tool, doesn't rise to the level of use that EDR/XDR etc does.
Not only do you need to detect that problems exist, you need to kill them at the point-of-attack.

Endpoint detect-respond does this.

MDR also has a pool of 24x7 engineers reviewing telemetry of interest to action or inform against.

MDR and competitor offer the "tip of the spear" against threat actors & provides eyes on covered devices around the clock.
For any organization with exception of huge companies that run their own SOC this is heaven-sent.

Integrations with PaaS/SaaS are not something where an agent can be deployed - curious if custom API's are possible to hook into those that will allow it.

Managed Defense provides our organization with 24/7 SOC capabilities for our small cybersecurity team by monitoring our FireEye/Trellix suite of products. In addition to alert monitoring, escalation, and response, they provide regular threat hunting and threat intelligence briefings.

Managed Defense is a must-have for any organization with limited cybersecurity resources and staff. In Managed Defense you have some of the best threat analyst and incident responders in the world to augment your security capabilities 24/7. It is hard to quantify the value of that piece of mind for a small/medium business.

Mandiant Managed Defense is being used for 24/7 coverage for the CSOC. Managed Defense is also used as an escalation point for high-severity incidents.

Mandiant Managed Defense has helped the company manage small and very large incidents. I believe Managed Defense is well suited for any organization with an appetite to use an outsourced Managed Defense provider. They provide 24/7 coverage, and they alert on real activity. There isn't a lot of irrelevant / trivial chatter back and forth. They notify us when they need too.