Microsoft Incident Response
Redmond, Washington
Microsoft Incident Response is an incident response firm founded in 2008, headquartered in Redmond, Washington, specializing in cloud security, nation-state attacks, ransomware serving healthcare, financial services, government. It offers a 2hr emergency response SLA and provides pre-negotiated IR retainers.
What does Microsoft Incident Response do?
Formerly Microsoft DART, this team provides proactive and reactive incident response services. Leverages unparalleled visibility into the global threat landscape through Microsoft's vast telemetry. Specializes in complex, nation-state, and cloud-based attacks.
What makes Microsoft Incident Response distinctive?
Leverages Microsoft Defender and Sentinel telemetry across the entire Azure/M365 customer base for cross-customer threat correlation unavailable to third-party responders; led recovery for multiple healthcare ransomware events involving 50,000+ workstations.