With your MDR service, you’ll receive various report deliverables uploaded to your Rapid7 Services Portal delivered via the secure file transfer system. Newest reports automatically sort to the top.
You'll receive different types of reports & notifications with Managed Detection and Response. Reports are shown below and listed on the appendix to the right. The MDR notifications page contains information on the various types of alerts you will receive.
Monthly Service Reports
Provides metrics and context about threat detection and incident response activities conducted in the previous month, along with information about the health of detection and response controls in your environment.
Below is a video overview of the Service Report. One of our Managed Detection & Response Customer Advisors breaks down each section in details to make it easy to understand the details in the report.
Incident Response Reports
This report details all analysis and incident management activities, key findings, the timeline of attacker activity, and recommended corrective actions to prevent the likelihood of recurrence and/or improve your ability to detect and respond to similar incidents in the future.
Compromise Assessment Report
Once your team has deployed the Insight Agent to 80% or more of the endpoints in your in-scope environment, a Compromise Assessment will be performed to identify active or historic compromises or potential avenues for future breaches. The report will also include prioritized remediation and mitigation recommendations.
If the Compromise Assessment finds that there is an active compromise, the incident response process will be initiated, and you will be notified by e-mail and/or phone (depending on incident severity).