Introduction

Active Response enables Field Effect MDR to automatically take action when a threat or vulnerability is detected.

The Active Response view in the MDR Portal and Mobile app provides a centralized record of all response actions that were triggered for your organization. Use this view to monitor actions, investigate details, and validate remediation outcomes.

To learn more about response policies and available actions, visit the Active Response Help Center chapter.

This article covers the following topics:

• Access the Active Response View
  • MDR Portal
  • Mobile App
• View Active Response Records
• Work with Active Response Records
• Mobile Experience

Access the Active Response View

The following sections explain how to access the Active Response view using either the MDR Portal or the Mobile App. 

MDR Portal

1. Log into the MDR Portal

2. Navigate to Insights > Active Response in the sidebar.

This view lists all Active Response activity performed by Field Effect MDR for your organization.

Partners

• Use the organization selector to choose a specific customer, or your partner view. See The Organization Selector to learn more

  • Customer View: only see Active Response records for that client

  • Partner View: see Active Response records for all end client organizations you manage.

• Navigate to Insights → Active Response

Mobile App

• Tap the Active Response tab at the bottom of the app.

• (Partners) Use the organization selector at the top of the app to switch between the partner and client views.

View Active Response Records

This view lists all Active Response activity performed by Field Effect MDR for your organization. Click on a record to open the details pane for that record.

The details pane includes:

• Details: Summary of the action

• Related AROs: Associated risks or observations

  • Click on that ARO to view it on the AROs page.

• Description: What happened and why

• Response log: Step-by-step execution history

The following columns are available in the table view, and details pane.

Click the Expand Icon to view the details pane in a new window.

Work with Active Response Records

• Use the search bar to find actions by hostname

• Apply filters for action type or organization

  • The organization filter is only available for partners.

• Click column headers to sort results

• Use Export to download results

Mobile Experience

In the mobile app, the Active Response view is presented as a list, and accessible from the bottom tab row.

• Use search and filters at the top of the screen

• Tap a response action to view detailed information

When drilled into a response action, you can access the same details as the MDR Portal. Click on a related ARO to view it in the mobile app.