What does Field Effect MDR do at a high level?

The Field Effect MDR service is focused on proactive threat surface monitoring, along with detection and response capabilities for security events. 

There are few capabilities that are covered through the Field Effect MDR Service: 

• Endpoint Protection 
• Intrusion Detection System 
• Network Monitoring 
• DNS Filtering
• Vulnerability Scans 
• Custom Threat Intelligence - incorporating a Security Intelligence function that is based on our client's environments. This is leveraged as part of delivering the MDR service, and is not shared directly. 
• DMARC - Field Effect will monitor domains configured in the monitoring profile for proper DMARC/SPF configuration

There are other capabilities that are offered by Field Effect, however they would be beyond the scope of the MDR Service: 

• Penetration Tests 
• Incident Response Plan - Additional Professional Service 
• Employee Awareness Training - Field Effect offers Cyber Range, a comprehensive training platform. 
• Security Info & Event Management 

Some of the capabilities can be considered as partially covered by the Field Effect MDR service: 

• Application Whitelisting - Field Effect MDR can be configured to block applications - we do not offer a comprehensive application whitelisting solution as part of the MDR service. 
• Asset Inventory - Field Effect MDR can be leveraged to monitor and gain visibility into your environment. 
• Data Loss Prevention - Field Effect MDR monitors cloud, network and endpoint environments for signs of data loss. Field Effect MDR is not a fully configurable DLP solution. 

The following capabilities are not part of the Field Effect MDR offering: 

• Database Encryption 
• DDoS Mitigation 
• Email Filtering 
• Mobile Device Encryption 
• Perimeter Firewalls - Filed Effect can however integrate with certain firewalls for monitoring 
• Web Application Firewall 
• Web Content Filtering