2023-135-E-IT Dept-Catapult Systems, LLC, a Quisitive Company-Fast Track Support

Browse Search

Statement of Work Orange County NC v20221005 March 8, 2023 p. 10 of 26 • Automated investigation and remediation including Microsoft Power Automate playbooks. • Security information and event management (SIEM) or API integration (including Azure Sentinel). Microsoft 365 Defender Microsoft 365 Defender is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and apps to provide integrated protection against sophisticated attacks. We provide remote guidance for: • Providing an overview of the Microsoft 365 security center. • Reviewing cross-product incidents, including focusing on what's critical by ensuring the full attack scope, impacted assets, and automated remediation actions that are grouped together. • Demonstrating how Microsoft 365 Defender can orchestrate the investigation of assets, users, devices, and mailboxes that might have been compromised through automated self- healing. • Explaining and providing examples of how customers can proactively hunt for intrusion attempts and breach activity affecting your email, data, devices, and accounts across multiple data sets. • Showing customers how they can review and improve their security posture holistically using Microsoft Secure Score. The following is out of scope: • Project management of the customer's remediation activities. • Ongoing management, threat response, and remediation. • Deployment guidance or education on: o How to remediate or interpret the various alert types and monitored activities. o How to investigate a user, computer, lateral movement path, or entity. • Custom threat hunting. • Supporting GCC-High or GCC-DoD (Office 365 US Government). • Security information and event management (SIEM) or API integration (including Azure Sentinel). Microsoft Defender for Office 365 Microsoft Defender for Office 365 safeguards your organization against malicious threats posed by email messages, links (URLs), and collaboration tools. Defender for Office 365 includes: • Threat protection policies: Define threat-protection policies to set the appropriate level of protection for your organization. • Reports: View real-time reports to monitor Defender for Office 365 performance in your organization. • Threat investigation and response capabilities: Use leading-edge tools to investigate, understand, simulate, and prevent threats. • Automated investigation and response capabilities: Save time and effort investigating and mitigating threats. We provide remote guidance for: • Reviewing Defender for Office 365 Recommended Configuration Analyzer (ORCA). • Setting up evaluation mode. DocuSign Envelope ID: 4F8CE7A2-004B-4516-AE7C-0C68141E2FF6