Announcements

• 1: Samurai Ticketing and Documentation
• 2: Samurai MDR Security Incidents and The Situation Room
• 3: Samurai MDR portal Authentication Updates

1 - Samurai Ticketing and Documentation

What is changing?

General tickets will now be available directly within the Samurai MDR portal. As per an update in March where we made Security Incident handling and availability within the Samurai MDR portal - we have done the same with General Tickets. We are also rolling out a new Samurai Documentation platform, however this will be relatively transparent to you!

Why are we making this change?

We want to continue providing you a world class Managed Detection & Response service and that includes improved customer service and enhanced documentation.

What are the benefits?

Samurai MDR portal ticketing:

• a single view to manage all tickets (e.g typically tickets you have submitted for the SOC to review)

• search, sort and filter tickets you have submitted

• communicate in real-time via a Communications Channel with our SOC analysts

The new Samurai Documentation platform will initially be a mirror of our current platform however we are busy working on an enhanced set of documentation

When will this change occur?

This rollout will occur on May 2, 2024 from 09:00 CET, we do not anticipate any service disruption.

How am I affected?

The updates are relatively transparent to you, however it is useful to bookmark our new Documentation Site and review updated documents relating to ticketing.

What do I need to do?

If you want to know how to raise a ticket in the Samurai MDR Portal please review ‘Getting Help’. You can also bookmark the new Samurai Documentation site.

Who do I contact if I need to ask questions?

Raise any questions you may have during a regular Threat Review or contact your Customer Success Manager who can assist.

2 - Samurai MDR Security Incidents and The Situation Room

What is changing?

In short, your method of consuming Security Incidents. Through this change, all Security Incident details, evidence and communication will be available and handled directly within the Samurai MDR portal within what we call - The Situation Room.

Why are we making this change?

We want to continue providing you a world class Managed Detection & Response service and ensure your data is handled securely. We believe in providing our customers as much visibility as possible of the service delivered and this change provides you many such benefits coupled with our ability to evolve and add more exciting features.

What are the benefits?

This change will provide you a multitude of benefits:

• a single view to manage Security Incidents

• far greater visibility into Security Incidents and associated details

• search, sort and filter Security Incidents

• allow you to pivot to Advanced Query and view corroborating evidence directly in the Samurai MDR portal and continue any investigation/analysis if required

• download and view evidence data

• communicate in real-time via a Communications Channel with our SOC analysts

When will this change occur?

This rollout will occur on March 7, 2024 between 07.00 & 08:00 CET, we do not anticipate any service disruption.

How am I affected?

Today you receive Security Incidents via email in PDF format and communicate with our SOC analysts via a ticket in the Samurai Help Center. Through this change we will no longer send Security Incident reports in PDF format via email - instead all Security Incident information will be found within the Samurai MDR portal. You will continue to receive email notifications of any Security Incidents, however notifications will include a link to the respective Security Incident within the Samurai MDR portal.

What do I need to do?

We have published some articles in anticipation of this update so you can familiarize yourself ahead of time. We recommend you review the articles:

• Security Incidents
• The Situation Room

Who do I contact if I need to ask questions?

Raise any questions you may have during a regular Threat Review or contact your Customer Success Manager who can assist.

3 - Samurai MDR portal Authentication Updates

Authentication to the Samurai MDR portal is changing.

What is changing?

We are making changes to the authentication method used for access to the Samurai MDR portal. To date you have used SMS-based two factor authentication (2FA), we are updating access to leverage Time-based One-Time Password (TOTP) from authenticator apps.

Why are we making this change?

We are security focused and constantly evolving, authenticator apps are more secure, reliable and faster!

When will this change occur?

We shall be rolling out the change on January 18 2024 at 02:00 CET.

How am I affected?

We will no longer support SMS based two factor authentication, therefore after we complete the update, upon your login to the Samurai MDR portal you will need to download an authenticator app of your choice and register your account.

Additionally, whilst we are making the update, expect a short period of downtime for access to the Samurai MDR portal and Help Center.

What do I need to do?

After the updates have been made:

1. Login to the Samurai MDR portal as you typically would with your username and password.

2. Select Sign In and the following will be displayed:

3. Follow the instructions to download Microsoft Authenticator. (Click on Microsoft Authenticator for additional instructions if needed). Alternatively you can download any authenticator app of your choice.

4. Within your authenticator app, Scan the QR code on the screen to register your account (your account in your chosen authenticator app will display as: NTT Security Holdings: <your email address>.

5. Once complete select Continue and you will be prompted to Enter the verification code from your authenticator app.

What if I encounter problems?

Please refer to your authenticator app user guide however should you encounter any problems scanning the QR code select Can’t scan? Try this or Still having trouble? which will allow you to manually setup and register your account.

Who do I contact if I am still having problems?

If you are still encountering problems contact your Customer Success Manager representative who can assist.