Managed Threat Response
Managed Threat Response (Sophos MTR) is a fully-managed, 24/7 threat hunting, detection, and remediation service.
The Sophos MTR Ops team provides two services:
- Managed Threat Response (MTR): This is the full service and offers detection, notification, and remediation. There are two levels of support: MTR Standard and MTR Advanced. For more information, see Managed Threat Response.
- Managed Threat Detection (MTD): This runs alongside third-party endpoint protection and offers detection and notification only. For more information, see Managed Threat Detection.
You can manage either service from the MTR pages in Sophos Central, but some features don't apply for Sophos MTD.
Setting up Sophos MTR
You can find out how to set up Sophos MTR in the following documents:
- Sophos MTR startup guide for new customers: This guide tells you how to set up Sophos MTR if you're a new customer.
- Sophos MTR startup guide for existing customers: This guide tells you how to set up Sophos MTR if you're already using Sophos Central or migrating to it.
You can find out how to set up Sophos MTD in the following document:
You can choose how we respond to threats and who we contact. You enter these settings when you set up Sophos MTR.
You can change your MTR settings at any time.
For help, see MTR settings.
Dealing with threats
If you have MTR Advanced, you can contact the MTR Ops team at any time to review activity on your estate, or to get advice.
You might also find these resources useful:
Find advice on dealing with ransomware and how to best protect yourself in Deal with ransomware.
Find help and advice on dealing with common malware attacks in Active Incident Remediation.