Samurai MDR Portal User Guide

Overview and guides for each feature within the portal

What is the Samurai platform?

The Samurai platform is a vendor-agnostic, cloud native, scalable, API-driven, advanced threat detection, and response platform. The platform is used to deliver the Managed Detection and Response (MDR) service.

What is the Samurai MDR portal?

The Samurai MDR portal is a centralized web-based application that provides users with access to a variety of features, information and tools - it is essentially your visibility into the Managed Detection and Response service, examples features include:

  • self service capabilities to manage and monitor telemetry integrations
  • query your data ingested into the Samurai platform
  • view alerts generating by the Samurai platform and integrated products
  • view, update and track security incidents reported to your organization
  • submit tickets to the Samurai Security Operation Center (SOC)
  • reporting and summary information on various aspects of the service

Which web browsers are supported?

The Samurai MDR portal supports all major browsers, including Chrome, Firefox, Edge and Safari.

Who uses the MDR portal?

Different teams or individuals may use the application based on their specific areas of responsibility, but generally anyone within your organization that requires service visibility and/or to configure aspects of the service.

Why use the MDR portal?

The MDR portal provides self service capabilities, e.g the ability to configure and download Local Collector(s) which may be required for you to integrate your telemetry data sources and/or add additional users. Once you have integrated your telemetry sources you can review general service metrics and start to query your data. Importantly for the MDR service, the MDR portal also provides access to Security Incidents and the ability to raise tickets as required. Please review useful links below covering various features:

How do I get help?

Review our Getting Help guide for information. You may also wish to review our Support Policy.

What’s next?

If you have not already done so, the first place to start is by integrating your products with the Samurai platform - this may require you to deploy local collector(s). Review Samurai Collectors to understand more.