Managed Defense Tour Mandiant Managed Defense Tour

Managed defense

Begin Self-Guided Tour

Why Fireeye MANDIANT Managed defense?

Industry-leading technology, intelligence and expertise

24 x 7 Managed Detection and Response

Continue

Leverage the full power of FireEye

Continue

Dashboard

Activity

Visibility

Dashboard

All Managed Defense customers receive a customized portal which is the main source of information and interaction with Managed Defense service and analysts.

EXPLORE KEY FEATURES

The CONTACT US tab enables quick contact with Managed Defense personnel.

The SETTINGS tab allows you to make adjustments to user privileges.

The HEALTH page shows the health of connected appliances to Managed Defense.

The ACTIVITY tab provides full visibility into what analysts are seeing and doing within customer environments in real time.

The Web Interface provides the following menu tabs. Hover over the tab names for more information. Select NEXT once ready to proceed.

Managed Defense Portal Menu Options

Analyzed Alerts

The Analyzed Alerts view shows metrics associated with alerts generated over time. Customers can review the total number of alerts which resulted in actual compromises in their environment and the volume of alerts associated with the detection mechanisms.

Explore Further

To see FireEye Managed Defense in action and how it can help protect your organization, please continue our navigational experience. You're also welcome to explore on your own at any time by closing the window or selecting EXPLORE ON YOUR OWN.

Analyst-Driven Techniques

Under Analyst-Driven Techniques, customers can view activity of the Managed Defense Advanced Analysis team, who proactively hunt for activity in customer environments. Detailed reports are available, indicating what was reviewed, if anything suspicious was found, and any resulting Investigation Reports created.

Community Protection Events

As a Managed Defense customer, you’ll benefit from situational awareness of emerging threats that FireEye tracks. When FireEye identifies a threat that might impact your environment, we’ll initiate a Community Protection Event to ensure you’re protected and keep you updated on all events associated with that threat.

Threats Summary

The Threats Summary view provides a summary of the Investigation Reports that have indications of malicious activity (severity of High, Medium, or Low) and insight into volume of Alerts by source and severity.

The RESOURCES tab allows you to view announcements, create customer summary reports and quickly view high-level details for connected endpoints.

EXPLORE ON YOUR OWN

CONTINUE TO ACTIVITY

Dashboard

Activity

Visibility

Activity

EXPLORE KEY FEATURES

The alerts view enables customers to see a summary overview of all open alerts triggered in their environment.

Investigations

Under the Investigation tab, customers can view a list of all investigations performed in their environment. This view contains high level severity and status information, with links into each investigation for more information.

Explore Further

CONTINUE TO VISIBILITY

To see FireEye Managed Defense in action and how it can help protect your organization, please continue our navigational experience to learn more about the visibility Managed Defense provides.

Alerts

Incidents

With the Incidents view, customers can see all incidents created in their environment, highlighting severity and status for each with links to drill down further for more information.

Managed Defense provides full transparency into all analyst activity. Customers are able to view everything analysts are seeing and doing within their environments, in real time.

EXPLORE ON YOUR OWN

Dashboard

Activity

Visibility

Managed Defense provides customers with full vibility so that they can gain complete understanding of where alerts are sitting within our internal process. With the Alert Lifecycle, customers are able to view all alert activity, including: when an alert is first seen by our service, when work has begun on an alert, and when that work has been completed and an investigation report has been issued.

When a customer clicks on the Alerts tab, they will be brought into the Managed Defense Alert Lifecycle and start with the Open Alerts view. This view is customizable by date range and enables customers to see a summary overview of all open alerts triggered in their environment.

Alert Lifecycle

Informational Alerts

Informational Alerts have been ingested and reviewed but are not considered a threat. These alerts are available for customers to review and are still utilized for proactive hunting activities by Managed Defense hunting analysts.

Under Review

Customers are able to view all alerts that are actively being investigated and under review in their environment. In this view, customers are able to get a complete overview, and see real-time status of all associated alerts, with links to obtain more information and investigation reports for each alert.

Reviewed Alerts

Under the Reviewed Alerts tab, customers are able to see a summary of all alerts reviewed by analysts in their environment that do not require a full investigation report. Analysts will provide notes and additional information as needed under each individual alert.

Reported Alerts

Under the Reported Alerts view, customers will find a list of all alerts that have been reviewed and completed, with a link to investigation reports or associated activity with each alert. Customers are able to drill down to find out more information on every alert/investigation.

Investigation Reports

Managed Defense customers receive a detailed summary report for all alerts that result in an investigation. This report provides threat context along with remediation recommendations to form an effective response and help prevent attackers from completing their mission.

EXPLORE ON YOUR OWN

EXPLORE KEY FEATURES

Explore how FireEye Managed Defense can work for you.

ReStart The Tour

ReStart THE Tour