Managed detection and response, with the actions agreed first.
F Creative Studio 360 triages, hunts and contains for organisations in any country, using the tools they already run.
An alert is not a response.
Hunting is described with MITRE ATT&CK. The work sits on the platforms the organisation already uses. Examples include endpoint tools and a SIEM such as Microsoft Sentinel, Splunk or IBM QRadar, when that is what is deployed.
F Creative Studio 360 does not sell those products, and does not require one of them.
- Monitoring is not the same as response
- A queue of alerts still needs a person who can decide. Managed detection and response is that decision, followed by a containment step only when the action was agreed in advance.
- Your tools stay yours
- F Creative Studio 360 works with the endpoint and log platforms the organisation already runs. The firm does not require you to buy a particular product.
- The hours follow the threat
- Coverage is agreed for the entities in scope, including overnight where the contract says so. A response time is written into that contract. It is not a slogan on this page.
- Data residency is a scope item
- Where telemetry may be processed is agreed before monitoring starts. A client who needs records kept in a given country has that written in. It is not assumed for every engagement.
What the service covers
The scope is the sources and the actions in the contract. The same service can be delivered for an organisation in any country.
- Alert triage
- A person reads what the tools raised, drops what is noise, and keeps what needs a decision.
- Threat hunting
- A search for behaviour that did not raise an alert, using MITRE ATT&CK as the language for the techniques in scope.
- Containment, when agreed
- Isolating a device or blocking a known bad destination only if that action was pre-approved. F Creative Studio 360 does not take an action the contract does not allow.
- Endpoint and log coverage
- The endpoints, identities and log sources named in the engagement. A source that is not connected is named as a gap, not implied.
- A monthly note
- What was investigated, what was contained, and what still needs a decision from the client.
- Escalation to incident response
- When an event is more than a contained alert, it moves to incident response. That is a different engagement unless the contract already includes it.
How an engagement starts
Nothing is watched until the sources, the hours and the allowed actions are written down.
- 1
Name the estate
Which entities, which countries, and which tools will send telemetry.
- 2
Agree the actions
What F Creative Studio 360 may do without a further call, and what must wait for the client.
- 3
Watch and hunt
Triage of alerts, and hunting inside the agreed sources. This is not a penetration test and not an availability test.
- 4
Report and hand up
A record of what was done. A confirmed incident is escalated under the path in the contract.
Common questions
What is included in managed detection and response?+
Triage, hunting across the sources in scope, containment actions that were pre-agreed, and a regular written note. The response time and the hours of cover are in the contract. F Creative Studio 360 does not publish a single number for every client.
How is this different from SOC monitoring?+
SOC monitoring watches, triages and tells you. Managed detection and response adds hunting and the containment steps you have already authorised. They can be scoped together, and they are not the same service.
Where do you deliver this?+
For organisations in any country. F Creative Studio 360 is based in Melbourne and works with clients worldwide. Where the telemetry is processed is agreed in the engagement.
Will you isolate our systems without asking?+
Only for the actions listed in the contract. Anything outside that list waits for the client. F Creative Studio 360 does not run a denial-of-service test, and does not change systems beyond the agreed containment.
How much does it cost?+
It depends on the number of sources, the hours of cover, and which containment actions are included. A scoping conversation with F Creative Studio 360 is the way to get a quote. There is no obligation to proceed.
Start with the actions you are willing to authorise.
F Creative Studio 360 will look at the tools and the hours you need, then say what a sensible service includes.