Sophos MDR Onboarding: Case workflow
Detections that generate a new MDR Case trigger the Sophos MDR Operations Team to investigate and respond to identified threats in your environment. This workflow is examined, along with the importance of adding your MDR authorized contacts, and choosing the appropriate Threat Response Mode. The detection triage process is covered in a linked video.
- Captions are generated by machine translation may contain errors**
- Video Chapters*
00:00 Intro
00:18 Detections and Cases
00:51 Analyst investigation
01:12 Authorized contacts
02:00 Threat response mode
03:09 Communication methods
03:34 Threat response example
04:37 Outro
- Relevant Documentation*
- ️ Techvid - Sophos MDR: Define MDR contacts in Sophos Central
- https://techvids.sophos.com/watch/2eA6kaNy8Bjw6sJ8idvigb
📖 Product documentation - MDR setup
https://docs.sophos.com/central/customer/help/en-us/index.html
📖 Product documentation - Allow Sophos sender addresses
https://docs.sophos.com/central/customer/help/en-us/GettingStarted/onboarding/mdr/index.html#set-up-the-mdr-service
- ️ Techvid - Sophos MDR: Manage cases
- https://techvids.sophos.com/watch/ttkoR8h1joabi6c71MXyPk
📖 Product documentation - Cases
https://docs.sophos.com/central/customer/eap/4.1/en-us/index.html
- ️ Techvid - Sophos MDR Onboarding: Detection triage
- https://techvids.sophos.com/watch/f83Zm5Pz8fMRAskzgi6Xoa
🔗 Sophos MDR onboarding guide
https://soph.so/mdr_onboarding
💡 Ask questions and get expert answers in the Sophos Community. https://community.sophos.com
- ️ Watch more expert video tutorials. https://techvids.sophos.com
🔔 Follow and subscribe. https://www.youtube.com/@SophosCybersecurity