Phoenix Protect - Active Response with Threat Containment (MXDR)

Phoenix Protect - Active Response is a managed security service built on Microsoft Sentinel, providing real time monitoring of security events across on premise and cloud environments. By analysing log data from your systems, the service proactively identifies potential threats and supports effective response management. Phoenix cyber security analysts work closely with you to investigate suspected incidents and deliver targeted responses, including guided remediation. The service leverages Microsoft’s AI and machine learning capabilities, combined with Phoenix’s internal threat intelligence and Microsoft Sentinel threat intelligence, to improve confidence in identifying incidents and assessing their severity. Threat Containment is an optional add on to Phoenix Protect - Active Response. It enables the Phoenix SOC to isolate devices managed by Microsoft Defender, they are also able to disable user accounts, perform password resets, revoke active sessions and block malicious IOC's, helping to limit the spread and impact of active threats. This add on is dependent on the Phoenix Protect - Active Response service and operates within the same support hours.