CrowdStrike

CrowdStrike

MDR Service by CrowdStrike Falcon Complete

What is Falcon Complete?

The MDR service “Falcon Complete” provided by CwordStrike is a 24/365 MDR service. The Falcon Complete team carries out the entire management, prevention, monitoring and response process for you.

What is MDR?

Need for MDR services

Need for MDR services
Need for MDR services

Falcon Complete Advantage

優位性①:業界最速の対応を24時間365日体制で提供

優位性①:業界最速の対応を24時間365日体制で提供
優位性①:業界最速の対応を24時間365日体制で提供

Advantage 2: Prompt start of operation and efficient management

Proven onboarding process

Advantage 2: Prompt start of operation and efficient management

>Onboarding time will vary depending on your agent deployment and security posture.

>Appendix B is the pre-agreed Falcon Complete playbook (contacts, monitored assets, detection/prevention/response policies, sensor upgrades, etc.).

Based on this content, the Falcon platform will be configured and the services of FalconComplete will be provided.

Efficient management by the FC team

Efficient management by the FC team

Service overview/Module configuration

Service overview/Module configuration

About the Falcon Complete Operations Team

About the Falcon Complete Operations Team

Service comparison table

Service name

CrowdStrike Holdings、Inc.

Macnica

vendor CrowdStrike Holdings、Inc.

Macnica and S&J

Minimum module configuration

Prevent + Insight + OverWatch + Discover

Prevent or Prevent + Insight

Monitored Tenant

Japan, overseas

Japan

*For overseas correspondence, please contact us separately.

Monitoring response time

24/365

24/365

Analysis result notification method

In order for CS to handle everything from management, monitoring, and response

No notification of analysis results.

If the detection requires repair, after repair is completed

We will inform you of the response result as a repair report.

* Threat analysis results will be included in the remediation report.

Email in Japanese

*Contact us separately for emergency phone notifications.

*Please contact us for English support

How to deal with analysis results

E-mail correspondence in Japanese (English can also be selected)

*Emergency phone calls from CS can be selected in Japanese or English, available 24/365

* E-mail correspondence is usually from 9:00 to 17:00 from Monday to Friday, and 24/365 in case of emergency.

Email support in Japanese

*24/365 email support

* Supports 24/365 phone notifications in case of emergency

Service contents

Installation/upgrading, configuration tuning, alert monitoring/response/investigation/reporting, report provision

Alert monitoring, investigative reporting, device isolation, device threat removal

*Fast forensic investigations, periodic reports, etc. are also available separately.

Combined use with other companies' AV

Yes with conditions

*Consultation required depending on the content

Possible

Product management (such as module upgrades and policy tuning)

Implemented on the service side

* Customers can view only the management console
(Provision of services according to prior agreements* between customers and vendors)

performed by the customer

*Can be supported by our product support

SLAs/SLOs

SLAs: Yes

・Critical alert: 1 hour until response start

・High and Medium alerts: 2 hours to respond

・Inquiry: 2 hours until response start

SLOs: Yes

・Prevent + Insight
・Monitored alerts: All alerts
・Report medium or higher alerts that the SOC analyst has judged to be a threat within 1 hour
・Prevent only
・Monitored alerts: Medium or higher alerts
・Report high and critical alerts that SOC analysts have identified as threats within 2 hours
·inquiry
・Response will be received within 1 hour after receiving the inquiry.

Third party evaluation

https://www.crowdstrike.jp/why-crowdstrike/third-party-tests-crowdstrike-reviews/
https://www.crowdstrike.jp/resources/reports/total-economic-impact-of-crowdstrike-falcon-complete/

Inquiry/Document request

In charge of Macnica CrowdStrike Co., Ltd.

Mon-Fri 8:45-17:30