Samurai MDR Security Incidents and The Situation Room
| Announced on | Rollout on |
|---|---|
| February 16, 2024 | March 7, 2024 between 07.00 & 08:00 CET |
What is changing?
In short, your method of consuming Security Incidents. Through this change, all Security Incident details, evidence and communication will be available and handled directly within the Samurai MDR application within what we call - The Situation Room.
Why are we making this change?
We want to continue providing you a world class Managed Detection & Response service and ensure your data is handled securely. We believe in providing our customers as much visibility as possible of the service delivered and this change provides you many such benefits coupled with our ability to evolve and add more exciting features.
What are the benefits?
This change will provide you a multitude of benefits:
a single view to manage Security Incidents
far greater visibility into Security Incidents and associated details
search, sort and filter Security Incidents
allow you to pivot to Advanced Query and view corroborating evidence directly in the Samurai MDR application and continue any investigation/analysis if required
download and view evidence data
communicate in real-time via a Communications Channel with our SOC analysts
When will this change occur?
This rollout will occur on March 7, 2024 between 07.00 & 08:00 CET, we do not anticipate any service disruption.
How am I affected?
Today you receive Security Incidents via email in PDF format and communicate with our SOC analysts via a ticket in the Samurai Help Center. Through this change we will no longer send Security Incident reports in PDF format via email - instead all Security Incident information will be found within the Samurai MDR application. You will continue to receive email notifications of any Security Incidents, however notifications will include a link to the respective Security Incident within the Samurai MDR application.
What do I need to do?
We have published some articles in anticipation of this update so you can familiarize yourself ahead of time. We recommend you review the articles:
Who do I contact if I need to ask questions?
Raise any questions you may have during a regular Threat Review or contact your Customer Success Manager who can assist.