Managed XDR monitors your environment 24/7 and integrates with lots of vendors like for instance Cisco Umbrella which we had licenses for. They review incident very quickly and alert you through mail or phone you when it's urgent. You can also easily let them know when it was a false positive so they can perform the necessary whitelistings. Review collected by and hosted on G2.com.

They do generate the same kind of alerts a lot. For example we have users travelling across the country and this is ofter flagged as impossible travel. I've mentioned multiple times that this is ok, but they can't seem to whitelist this for some reason, so these alerts keep coming in. Review collected by and hosted on G2.com.