MS Datasheet Security Services IncidentResponse Final

Download as pdf or txt
Download as pdf or txt
You are on page 1of 2

Microsoft

Security Services
for Incident
Response
Highly-specialized support
before, during, and after a
cybersecurity crisis

Security

What is Microsoft Security Services for Global response


Incident Response? Rely on a complete investigative
service that provides remote and on-
The Microsoft Security Services for Incident Response site response and recovery services.
service will help you remove a bad actor from your
environment, build resilience for future attacks, and mend
your defenses after a breach. Industry proven practices
Our processes have been refined
Our global team of experts leverages Microsoft’s strategic through thousands of customer
partnerships with security organizations and engagements and can quickly
governments around the world and with internal restore confidence and business
Microsoft product groups to respond to incidents and operations.
help customers secure their most sensitive, critical
environments.
Actionable reporting
By leveraging comprehensive toolsets, Microsoft’s threat Receive an executive overview with
research, and signals from our security product stack, our recommendations for short and
experts will assist your organization in removing long-term steps to improve overall
attackers, recovering your environment, and reducing security posture.
your attack surface.
Our services

Security Services for Incident Response provides services that


support customers before, during, and after a breach.
Proactive services
Cybersecurity Operations Services
Proactive approach to determine customer exposure through deep point-in-time analysis and forensic
investigation of the customer environment.
Security and Crisis Response Exercise
Interactive tabletop exercises that uses real-world observations, centered around understanding crisis
situations & response tactics.

Advanced Threat Hunting


Hunts for existing threats in your production environment providing your security operations team the
knowledge they need to hunt new threats and prioritize their focus on the most critical risks.

Incident response
Cybersecurity Incident Response
Onsite incident response investigation to determine whether systems are under targeted exploitation
Office 365 Incident Response
Analysis of attacker persistence in Office 365, compromised accounts and potential account traversal

Recovery services
Compromise Recovery
Removing attacker control from an environment, regaining administrative control after a cybersecurity
incident, and tactically hardening high-impact controls to prevent future breaches.
Ransomware Recovery
Attack containment, restoration of critical identity infrastructure and work to limit exposure of ransomware
across your environment.

“The team arrived quickly onsite with tools


specifically designed for them to bring the
systems back online in a secure
operating environment.”
Dean Wells
Chief of Information Technology, Government of Nunavut

Learn more → https://aka.ms/SecurityServicesIncidentResponse

©2022 Microsoft Corporation. All rights reserved. The information in this document represents the current view of Microsoft on the
content. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT.

You might also like