Security Program Controls/Technologies, Channel partners, Content, MDR, MSSP, XDR

Deloitte Releases Expanded Managed Extended Detection and Response (MXDR) Platform

LONDON, ENGLAND – OCTOBER 02: The Deloitte offices stand in 2 New Square on October 2, 2018 in London, England. The government has called for a review of the British auditing industry after a series of scandals including the collapses of Carillion and BHS revealed serious failures in the auditing process. The ‘Big Four’ accountin...

LONDON, ENGLAND – OCTOBER 02: The Deloitte offices stand in 2 New Square on October 2, 2018 in London, England. The government has called for a review of the British auditing industry after a series of scandals including the collapses of Carillion and BHS revealed serious failures in the auditing process. The ‘Big Four’ accounting firms, which are Deloitte, PwC, Ernst & Young (EY) and KPMG audit the large majority of the UK’s largest listed companies. (Photo by Jack Taylor/Getty Images)

Deloitte, a Top 250 MSSP, has expanded its Managed Extended Detection and Response (MXDR) platform to include enhanced cybersecurity industry intelligence, the global audit, tax and consulting firm announced July 18.

MXDR's Four New Features

The expanded MXDR platform features four new modules for dynamic adversary intelligence, digital risk protection, threat hunting and mobile device security. “MXDR by Deloitte” now offers:

  • Cyber Security Intelligence (CSI). An expansion of the platform's core intelligence body of knowledge, CSI data includes Deloitte's own proprietary sources and tools, as well as CrowdStrike Falcon X automated threat intelligence. CSI provides actionable Indicators of Compromise (IoCs), threat notifications, threat actor profiles, industry landscapes, automated sandbox analysis, as well as threat briefings requests for information (RFIs).
  • Dynamic Adversary Intelligence (DAI). The DAI module assists clients as they conduct over-the-horizon adversary investigations. DAI uses the open web without the need to deploy sensors into a client environment. It also collects intelligence data from the dark web, ransomware, cryptocurrency and network enumeration of malicious cyber actors and nation states. The module can help organizations improve the relevancy and expand the intelligence data they use in security decision-making.
  • Digital Risk Protection (DRP). The DRP module offers a channel through which organizations can follow their external "digital footprints" across the open, deep and dark webs, including mobile apps and social media. It alerts organizations to threats, such as potential intellectual property exposure, and also when potential email, credential, brand and other misuse are found.
  • Active Hunt and Response (AHR). The AHR module delivers next-level active hunting capabilities, inclusive of Deloitte's own analytics. A new dissolvable, in-memory hunt sensor offers a distinct method to collect telemetry, engage and defeat adversaries silently. AHR can be deployed via the full platform or as a stand-alone on-site capability for specific client mission needs.
  • Mobile Prevent, Detection, and Response (MPDR). As mobile device management programs can struggle to keep pace with security needs for growing and diversifying on-network mobile devices, Deloitte has expanded proprietary hunt capabilities offered for mobile within the MPDR module. The module is now also fully integrated with CrowdStrike Falcon for Mobile Endpoint Detection and Response (EDR) and CrowdStrike's mobile threat defense (MTD).

Deloitte’s earlier MXDR modules included: prevention, detection and remediation for endpoints; cloud security workloads; identity; insider threat, proactive hunting, intelligence, attack surface and vulnerability management; and unified XDR log and analytics management.

MXDR’s Proactive Defense and Intelligence Capabilities

Curt Aubley, managing director and MXDR by Deloitte leader, explains the recent evolution of the expanded MXDR offering:

"As the threat landscape continues to change rapidly, we want to offer our existing and future clients’ access to what we call the 'next generation' of threat intelligence and threat hunting capabilities. With this new MXDR expansion, we focused on helping organizations take a more proactive defensive posture in their cyber programs — whether they choose to do so via our whole platform or use of just a few of our MXDR modules."

The announcement follows Deloitte’s release of the Zero Trust Access managed security service to help organizations secure communications between end-users across their devices and applications, as reported by MSSP Alert on July 11.

Jim Masters

Jim Masters is Managing Editor of MSSP Alert, and holds a B.A. degree in Journalism from Northern Illinois University. His career has spanned governmental and investigative reporting for daily newspapers in the Northwest Indiana Region and 16 years in a global internal communications role for a Fortune 500 professional services company. Additionally, he is co-owner of the Lake County Corn Dogs minor league baseball franchise, located in Crown Point, Indiana. In his spare time, he enjoys writing and recording his own music, oil painting, biking, volleyball, golf and cheering on the Corn Dogs.

Related