Our primary use case was monitoring the threat actors that our clients were concerned about. We also used Mandiant Advantage to map the infrastructure that the threat experts were using and monitor all the discussions involving the customer originating from these threat actors.
They're in the process of rebranding with Google. I get access to Mandiant Advantage as well as Manage Defense with our subscription. What they do is they go over, and they grab all the events out of Helix, do all the level one, two, and three checks on it, and then send over whatever is left over, which is typically very little. I utilize it sparingly. The Managed Defense uses that information already and does a lot of the grunt work on the incidents that come in.
Our primary use case was monitoring the threat actors that our clients were concerned about. We also used Mandiant Advantage to map the infrastructure that the threat experts were using and monitor all the discussions involving the customer originating from these threat actors.
They're in the process of rebranding with Google. I get access to Mandiant Advantage as well as Manage Defense with our subscription. What they do is they go over, and they grab all the events out of Helix, do all the level one, two, and three checks on it, and then send over whatever is left over, which is typically very little. I utilize it sparingly. The Managed Defense uses that information already and does a lot of the grunt work on the incidents that come in.