{"id":25655,"date":"2025-01-07T17:01:01","date_gmt":"2025-01-08T01:01:01","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2025\/01\/07\/news-19378\/"},"modified":"2025-01-07T17:01:01","modified_gmt":"2025-01-08T01:01:01","slug":"news-19378","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2025\/01\/07\/news-19378\/","title":{"rendered":"Why security teams rely on Microsoft Defender Experts for XDR for managed detection and response"},"content":{"rendered":"

Credit to Author: Microsoft Security Experts| Date: Mon, 06 Jan 2025 17:00:00 +0000<\/strong><\/p>\n

The expanding attack surface is creating more opportunities for exploitation and adding to the pressure on security leaders and teams. Increasingly, organizations are investing in managed detection and response services (MDR) to bolster their security operations center (SOC) and meet the challenge. <\/sup>Demand is growing rapidly: according to Frost & Sullivan, the market for MDR is expanding at a rate of 35.2% annually.1\u00a0<\/sup>\u00a0\u00a0<\/p>\n

While there are new vendors launching MDR services regularly, many security teams are turning to Microsoft Defender Experts for XDR,<\/a> a recognized leader, to deliver comprehensive coverage.1 <\/sup>Employed worldwide by organizations across industries, Microsoft\u2019s team of dedicated experts proactively hunts for cyberthreats and triages, investigates, and responds to incidents on a customer\u2019s behalf around the clock across their most critical assets. Our proven service brings together in-house security professionals and industry-leading protection <\/sup>with Microsoft Defender XDR to help security teams rapidly stop cyberthreats and keep their environments secure.2<\/sup>\u00a0<\/p>\n

\n

Frost & Sullivan names Microsoft Defender Experts for XDR a leader in the Frost Radar\u2122 Managed Detection and Response for 2024.1<\/sup><\/em>\u00a0<\/p>\n<\/blockquote>\n

\n
\n
\n
\t\t\t\t\t\"Microsoft\t\t\t\t<\/div>\n
\n
\n

Microsoft Defender Experts for XDR<\/h2>\n
\n

Give your security operations center team coverage with end-to-end protection and expertise.<\/p>\n<\/p><\/div>\n

\t\t\t\t\t\t\t \t\t\t\t\t\t\t\tLearn more<\/span> \t\t\t\t\t\t\t\t<\/span> \t\t\t\t\t\t\t<\/a> \t\t\t\t\t\t<\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n

Reduce the staffing burden, improve security coverage, and focus on other priorities<\/h2>\n

Microsoft Defender Experts for XDR improves operational efficacy greatly while elevating an organization’s security posture to a new level. The team of experts will monitor the environment, find and halt cyberthreats, and help contain incidents faster with human-led response and remediation. With Defender Experts for XDR, organizations will expand their threat protection capabilities, reduce the number of incidents over time, and have more resources to focus on other priorities.<\/p>\n

More experts on your side<\/h3>\n

Scaling in-house security teams remains challenging. Security experts are not only scarce but expensive. The persistent gap in open security positions has widened to 25% since 2022, meaning one in four in-house security analyst positions will remain unfilled.3<\/sup> In the Forrester Consulting New Technology Project Total Economic Impact study<\/a>, without Defender Experts for XDR, the in-house team size for the composite organization would need to increase by up to 30% in mid-impact scenario or 40% in high-impact scenario in year one to provide the same level of threat detection service.4<\/sup> When you consider the lack of available security talent, increasing an in-house team size by 40% poses significant security concerns to CISOs. Existing security team members won\u2019t be able to perform all the tasks required. Many will be overworked, which may lead to burnout.<\/p>\n

With more than 34,000 full-time equivalent security engineers, Microsoft is one of the largest security companies in the world. Microsoft Defender Experts for XDR reinforces your security team with Microsoft security professionals to help reduce talent gap concerns. In addition to the team of experts, customers have additional Microsoft security resources to help with onboarding, recommendations, and strategic insights.<\/p>\n

\n

\u201cMicrosoft has the assets and people I needed. All the technologies, Microsoft Azure, and a full software stack end-to-end, all combined together with the fabric of security. Microsoft [Defender Experts for XDR] has the people and the ability to hire and train those people with the most upmost skill set to deal with the issues we face.\u201d<\/em><\/p>\n

\u2014Head of Cybersecurity Response Architecture, financial services industry<\/p>\n<\/blockquote>\n

Accelerate and expand protection against today\u2019s cyberthreats<\/h3>\n

Microsoft Defender Experts for XDR deploys quickly. That\u2019s welcome news to organizations concerned about maturing their security program and can\u2019t wait for new staffing and capabilities to be developed in-house. Customers can quickly leverage the deep expertise of the Microsoft Defender Experts for XDR team to tackle the increasing number of sophisticated threats.\u00a0<\/p>\n

\n
\n

\t\t\tWhat is phishing?\t\t<\/p>\n

\t\t \t\t\tLearn more<\/span> <\/span> \t\t<\/a> \t<\/div>\n<\/p><\/div>\n

CISOs and security teams know that phishing attacks continue to rise because cybercriminals are finding success. Email remains the most common method for phishing attacks, with 91% of all cyberattacks beginning with a phishing email. Phishing is the primary method for delivering ransomware, accounting for 45% of all ransomware attacks. Financial institutions are most targeted at 27.7% followed by nearly all other industries.5<\/sup><\/p>\n

\n

According to internal Microsoft Defender Experts for XDR statistics, roughly 40% of halted threats are phishing.<\/em><\/p>\n<\/blockquote>\n

Microsoft Defender Experts for XDR is a managed extended detection and response service (MXDR). MXDR is an evolution of traditional MDR services, which primarily focuses on endpoints. Our MXDR service has greater protection across endpoints, email and productivity tools, identities, and cloud apps\u2014ensuring the detection and disruption of many cyberthreats, such as phishing, that would not be covered by endpoint-only managed services. That expanded and consolidated coverage enables Microsoft Defender Experts for XDR to find even the most emergent threats. For example, our in-house team identified and disrupted a significant Octo Tempest operation that was working across previously siloed domains.\u00a0<\/p>\n

\n

The reduction in the likelihood of breaches with Microsoft Defender Experts for XDR is roughly 20% and is worth $261,000 to $522,000 over three years with Defender Experts.4<\/sup><\/em><\/p>\n<\/blockquote>\n

In addition to detecting, triaging, and responding to cyberthreats, Microsoft Defender Experts for XDR publishes insights to keep organizations secure. That includes recent blogs on file hosting services abuse and phishing abuse of remote monitoring and management tools. As well, the MXDR service vetted roughly 45 indicators related to adversary-in-the-middle, password spray, and multifactor authentication fatigue and added them to Spectre to help keep organizations secure.<\/p>\n

From September 2024 through November 2024, Microsoft Security published multiple cyberthreat articles covering real-world exploration topics such as Roadtools, AzureHound, Fake Palo Alto GlobalProtect, AsyncRAT via ScreenConnect, Specula C2 Framework, SectopRAT campaign, Selenium Grid for Cryptomining, and Specula.<\/p>\n

\n

\u201cThe Microsoft MXDR service, Microsoft Defender Experts for XDR, is helping our SOC team around the clock and taking our security posture to the next level. On our second day of using the service, there was an alert we had previously dismissed, but Microsoft continued the investigation and identified a machine in our environment that was open to the internet. It was created by a threat actor using a remote desktop protocol (RDP). Microsoft Defender Experts for XDR’s MXDR investigation and response to remediate the issue was immediately valuable to us.\u201d<\/em><\/p>\n

\u2014Director of Security Operations, financial services industry<\/p>\n<\/blockquote>\n

\n
MXDR beyond the endpoint with Microsoft Defender Experts for XDR<\/a><\/div>\n<\/p><\/div>\n

Halt cyberthreats before they do damage<\/h3>\n

In 2024 the mean time for the average organization to identify a breach was 194 days and containment 64 days.6\u00a0\u00a0<\/sup>Organizations must proactively look for cyberattackers across unified cross-domain telemetry versus relying solely on disparate product alerts. Proactive threat hunting is no longer a nice-to-have in an organization\u2019s security practice. It\u2019s a must-have to detect cyberthreats faster before they can do significant harm.<\/p>\n

When every minute counts, Microsoft Defender Experts for XDR can help speed up the detection of an intrusion with proactive threat hunting informed by Microsoft\u2019s threat intelligence, which tracks more than 1,500 unique cyberthreat groups and correlates insights from 78 trillion security signals per day.7<\/sup><\/p>\n

Microsoft Defender Experts for Hunting<\/a> proactively looks for threats around the clock across endpoints, email, identity, and cloud apps using Microsoft Defender and other signals. Threat hunting leverages advanced AI and human expertise to probe deeper and rapidly correlate and expose cyberthreats across an organization’s security stack. With visibility across diverse, cross-domain telemetry and threat intelligence, Microsoft Defender Experts for Hunting extends in-house threat hunting capabilities to provide an additional layer of threat detection to improve a SOC’s overall threat response and security efficacy.<\/p>\n

\n

In a recent survey, 63% of organizations saw a measurable improvement in their security posture with threat hunting. 49% saw a reduction in network and endpoint attacks along with more accurate threat detection and a reduction of false positives.8<\/sup><\/em><\/p>\n<\/blockquote>\n

Microsoft Defender Experts for Hunting enables organizations to detect and mitigate cyberthreats such as advanced persistent threats or zero-day vulnerabilities. By actively seeking out hidden risks and reducing dwell time, threat hunting minimizes potential damage, enhances incident response, and strengthens overall security posture. <\/p>\n

Microsoft Defender Experts for XDR, which includes Microsoft Defender Experts for Hunting, allows customers to stay ahead of sophisticated threat actors, uncover gaps in defenses, and adapt to an ever-evolving cyberthreat landscape.<\/p>\n

\n

\u201cManaged threat hunting services detect and address security threats before they become major incidents, reducing potential damage. By implementing this (Defender Experts for Hunting), we enhance our cybersecurity posture by having experts who continuously look for hidden threats, ensuring the safety of our data, reputation, and customer trust.\u201d <\/em><\/p>\n

\u2014CISO, technology industry<\/p>\n<\/blockquote>\n

Spend less to get more<\/h3>\n

Microsoft Defender Experts for XDR helps CISOs do more with their security budgets. According to a 2024 Forrester Total Economic Impact\u2122 study, Microsoft Defender Experts for XDR generated a project return on investment (ROI) of up to 254% with a projected net present value of up to $6.1 million for the profiled composite company.4<\/sup><\/p>\n

Microsoft Defender Experts for XDR includes trusted advisors who provide insights on operationalizing Microsoft Defender XDR for optimal security efficacy. This helps reduce the burden on in-house security and IT teams so they can focus on other projects.<\/p>\n

Beyond lowering security operations costs, the Forrester study noted Microsoft Defender Experts for XDR efficiency gains for surveyed customers, including a 49% decrease in security-related IT help desk tickets. Other productivity gains included freeing up 42% of available full time employee hours and lowering general IT security-related project hours by 20%.4<\/sup><\/p>\n

Learn how Microsoft Defender Experts for XDR can improve organizational security<\/h2>\n

Microsoft Defender Experts for XDR is Microsoft\u2019s MXDR service. It delivers round-the-clock threat detection, investigation, and response capabilities, along with proactive threat hunting. Designed to help close the security talent gap and enhance organizational security postures, the MXDR service combines Microsoft\u2019s advanced Microsoft Defender XDR capabilities with dedicated security experts to tackle cyberthreats like phishing, ransomware, and zero-day vulnerabilities. Offering rapid deployment, significant ROI (254%, as per Forrester), and operational efficiencies, Microsoft Defender Experts for XDR reduces incident and alerts volume, improves the security posture, and frees up in-house resources. Organizations worldwide benefit from these scalable solutions, leveraging Microsoft\u2019s threat intelligence and security expertise to stay ahead of evolving cyberthreats.<\/p>\n

To learn more, please visit Microsoft Defender Experts for XDR<\/a> or contact your Microsoft security representative.<\/p>\n

To learn more about Microsoft Security solutions, visit our website.<\/a> Bookmark the Security blog<\/a> to keep up with our expert coverage on security matters. Also, follow us on LinkedIn (Microsoft Security<\/a>) and X (@MSFTSecurity<\/a>) for the latest news and updates on cybersecurity.<\/p>\n

\n

1<\/sup>Frost & Sullivan names Microsoft a Leader in the Frost Radar\u2122: Managed Detection and Response, 2024<\/a>, Srikanth Shoroff. March 25, 2024.<\/p>\n

2<\/sup>Microsoft a Leader in the Forrester Wave for XDR<\/a>, Microsoft Security Blog. June 3, 2024. <\/p>\n

3<\/sup>ISC2 Cybersecurity Workforce Report<\/a>, 2024.<\/p>\n

4<\/sup>Forrester Consulting study commissioned by Microsoft, 2024, New Technology: The Projected Total Economic Impact\u2122 of Microsoft Defender Experts For XDR<\/a>.<\/p>\n

5<\/sup>2024 Phishing Facts and Statistics<\/a>, Identitytheft.org.<\/p>\n

6<\/sup>Time to identify and contain data breaches global 2024<\/a>, Statista.<\/p>\n

7<\/sup>Microsoft Digital Defense Report<\/a>, 2024.<\/p>\n

8<\/sup>SANS 2024 Threat Hunting Survey<\/a>, March 19, 2024.<\/p>\n

The post Why security teams rely on Microsoft Defender Experts for XDR for managed detection and response<\/a> appeared first on Microsoft Security Blog<\/a>.<\/p>\n

https:\/\/blogs.technet.microsoft.com\/mmpc\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Credit to Author: Microsoft Security Experts| Date: Mon, 06 Jan 2025 17:00:00 +0000<\/strong><\/p>\n

Microsoft Defender Experts for XDR is a mature and proven service that triages, investigates, and responds to incidents and hunts for threats on a customer\u2019s behalf around the clock. Learn more about why organizations across major industries rely on it.<\/p>\n

The post Why security teams rely on Microsoft Defender Experts for XDR for managed detection and response<\/a> appeared first on Microsoft Security Blog<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10759,10378],"tags":[],"class_list":["post-25655","post","type-post","status-publish","format-standard","hentry","category-microsoft","category-security"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/25655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=25655"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/25655\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=25655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=25655"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=25655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}