Managed detection and response (MDR) services provide customers with remotely delivered security operations centre (SOC) functions. These functions allow organisations to rapidly detect, analyse, investigate and actively respond through threat disruption and containment. They offer a turnkey experience, using a predefined technology stack that commonly covers endpoint, network, logs and cloud. Telemetry is analysed within the provider’s platform using a range of techniques. This process allows for investigation by experts skilled in threat hunting and incident management, who deliver outcomes that businesses can act upon.