Factor1 Managed Detection & Response
Managed Detection & Response.
Around-the-clock monitoring of endpoints, identities and email, with incidents investigated, contained and reported by Factor1 analysts.
What's included
Endpoints, identities and email through SentinelOne and Microsoft Defender.
Incidents investigated and contained by Factor1 analysts.
What happened, what was affected, what was done.
Detections, actions and changes across the month.
How it works
Your endpoints and Microsoft 365 tenant connect to our monitoring.
Detections route to the security operations centre.
An analyst investigates and, where agreed, contains the incident directly.
You are contacted when it matters, with a written report to follow.
Built on SentinelOne and Microsoft Defender.
We supply and configure the licensing where needed, or work with what you already have. Either way, the configuration is set for your organisation rather than left at the defaults.
More on SentinelOne ›Common questions
Yes. We work with the licensing you already have and supply anything missing.
Containment is agreed at onboarding. Within that agreement analysts act directly; outside it, you get the call first.
By endpoint count, with the scope agreed before anything starts.
A summary of detections, actions and changes, alongside the per-incident reports.
Start with the assessment.
It reviews your current monitoring coverage as part of the wider picture, at a fixed price.

