What is your primary use case for Binary Defense MDR?

They co-manage our Sentinel SIEM instance, and they provide a Security Operations Center (SOC) with 24/7 coverage. They perform research and remediation. They have a separate team for phishing. That smaller team has rights to our Defender Cloud instance so that they can handle malicious emails and things like that. They have been very good.

Over the years, we've needed to shift our use case, which is actually an advantage. We use Binary Defense to supplement and extend our monitoring capabilities across our enterprise. They're very flexible. They use our tooling and they monitor escalated issues. They do threat hunting for us. They do threat research for us as well. They provide threat intelligence when there's a breaking zero-day threat or if something new is happening in the security space. They provide deep technical expertise in detection, threat hunting, and intelligence in a way that directly covers what I need.

We use Binary Defense to monitor all our devices, including our servers, laptops, and environments.

With Binary Defense MDR we check and handle security issues, closing ones that are okay and acting fast on potential problems. It is all about keeping things safe and responding quickly to any cyber threats.

We rely on Binary Defense MDR to protect our servers and employee computers from malware. It keeps a constant watch and lets us know quickly if there is any suspicious activity.

We use it to get security notifications. There are only two security people on my team, and monitoring things 24/7 would take a team of 10 or 12. We use Binary Defense to help monitor things for us so that my team can work on the day-to-day security tasks.

We're using it for dark web monitoring and alerting for our executive staff and our organization, and we're also utilizing them to actually manage and run our security operations center.

We use Binary Defense to secure our environment against cyber threats. The solution provides 24/7 live monitoring. The solution currently covers around 3,000 endpoints.

We use Binary Defense MDR to monitor our security alerts and network traffic continuously. The solution provides a monitoring service that includes initial triage of alerts and escalation to my team for further action.

We're a small business, but we have a large number of endpoints to control. For an analyst, it's a large task if you have a thousand endpoints. So, we use the BDS tool, and we use them as a SOC for our tier one and tier two support. They take all our alerts and vet them, and then only give actionable ones to either my analyst or myself. We're a Cisco shop. I'm kind of old-fashioned, so I've got layered security in the organization. We've tied that all into the MDR solution, so not only do I have their tools, but I have our tools mixed in there. We have a very good view of the whole organization. If something were to happen, we should be able to catch it before it gets to the second endpoint if it's able to get that far.

We're a big company with a small IT shop, specifically when it comes to IT security. We needed a partner that could be an extension of our exsisting team.

Binary Defense provides us with Security Incident and Event Management (SIEM), managed by their third-party SOC team. They are our MDR provider that provides MSSP services; they review the alerts coming into our SIEM from all our devices across the globe, then translate those into alerts and incidents, and elevate them to my internal team, and we take care of it from there. Our environment is global, with three primary regions: Asia-Pacific, Europe, and North America. We have several remote sensors in each area, with intrusion detection sensors at some locations.