Deploy threat detection and response tools
An MSP may need to deploy Microsoft Defender XDR and Microsoft Sentinel without having all the specialist skills required to configure them and integrate them into a customer’s environment.
MC3 Cloud supports your team throughout the project, from defining the scope to handover. The aim is to prepare a security environment that your team can take over for monitoring and incident handling.
Configure protections and bring alerts together
We work with you to identify priority use cases, existing solutions, data sources to connect, and access and licensing prerequisites.
Depending on the agreed scope, our teams can:
- configure the selected Microsoft Defender components for endpoints, identities, email and applications;
- deploy Microsoft Sentinel and integrate security data sources;
- configure detection rules and dashboards;
- implement the agreed response automations, with triggers and approval requirements defined with your team.
Test the configuration and hand over to your team
We verify that events are collected, alerts are generated and the configured scenarios work as intended. Settings are adjusted before handover.
The handover includes configuration documentation, operating procedures and a walkthrough of incident triage and investigation workflows.
The engagement ends at handover to the MSP. It does not include day-to-day monitoring, ongoing incident handling or SOC operations.
Example scenario
An MSP wants to bring Microsoft Defender alerts and events from other devices together in Microsoft Sentinel. MC3 Cloud configures the agreed connectors and rules, tests data collection, and hands over the procedures to the MSP team responsible for monitoring.