Company security in the era of hacker attacks, or how we protect customers thanks to EDR system implementations
Data security is the foundation of operations for many companies in the accounting, legal, manufacturing, retail, and consulting sectors. Although every industry is currently at risk of hacking, many believe this applies only to large players and corporations. Nothing could be further from the truth. Small and medium-sized enterprises (SMEs) are increasingly becoming targets of cyberattacks. According to the National Cybersecurity Institute, as many as 40% of small and medium-sized businesses in Poland fell victim to incidents last year.1 In an era of frequent scout attacks, ensuring cybersecurity within a company has become a time and money saver.
Rapid response, scanning, real-time protection, AI-based learning, and virus containment – these are just some of the features our clients gain by implementing an endpoint detection and response (EDR) security system.
An external client approached us with an inquiry due to concerns about an attack. The company needed security for approximately 100 users, and their previous antivirus license had expired. The selection criteria included ease of implementation, level of security, ease of integration with existing systems, and price. We considered ESET XDR, CrowdStrike, and Microsoft Defender. After analysis, we chose Microsoft Defender for Business, which is part of the Microsoft 365 Business Premium package.
Start of implementation
Microsoft Defender for Business is an advanced EDR solution that ensures endpoint security within an organization. This AI-based tool for IT administrators uses behavioral analysis to detect and prevent network threats early, before they can cause significant damage. We chose this product because of its integration with Microsoft Intune. A connector between the services needed to be configured. Agent configuration and data transfer were then automated. During initial configuration, basic protection rules and exclusions were defined for the programs used within the company.
What does Microsoft Defender for Business offer, i.e. what exactly did the customer gain?
- Threat and vulnerability management – analysis of current virus threats and scanning for software vulnerabilities on workstations allows for effective and quick detection and prevention, even before an attack occurs.
- Attack Surface Reduction – a set of defined rules and safeguards that limit hackers’ capabilities by blocking potentially dangerous activities and techniques.
- Next-generation protection – the tool is fully integrated with the operating system, implementation is very simple and works with many products from the leading Microsoft company.
- Endpoint detection and response – the tool operates in real time, providing continuous protection even for basic activities. Customers don't have to worry about their computer being infected, for example, by opening an email attachment.
- Automatic investigation and repair – thanks to artificial intelligence, infected computers are disconnected from the network without the need for administrator intervention. Attacks by viruses or malicious hackers are quickly neutralized.
Summary – the effect of the work at the client's
- A solution was selected that met the client's requirements for the EDR system.
- Automatic onboarding of new users to Microsoft Defender for Business was initiated.
- Integration with Microsoft Intune was implemented as part of the M365 Business Premium license.
- Full security was ensured for the client's business devices.
- Business integrity and continuity were ensured in the event of scouting attacks.
Finally, the solution was tested for correct operation. All tests were successful, and no malware penetrated the client's infrastructure. The screenshot below shows sample detections of suspicious files.
EDR solutions are becoming increasingly popular due to the growing risk of data leaks. If your company is considering upgrading its antivirus system, we're happy to help!
source: https://kicb.pl/cyberbezpieczenstwo-w-malych-i-srednich-polskich-firmach-wyniki-badania/)
Paweł Kaczmarski
IT administrator at Support Online
our
support.
What IT solutions do we use at Support Online?
When is it worth using an IT company?
Why is it worth hiring an IT company rather than a freelance IT specialist?
What are the advantages of working with IT Support Online?
An IT company, or IT firm, deals with information technology in a broad sense. This includes, among other things:
- Software design and development: An IT company can create custom applications for other companies or software products for the mass market. Depending on their specialization, these can include mobile applications, desktop applications, web applications, or embedded systems.
- Consulting services: An IT company often provides experts to advise on implementing new technologies, optimizing business processes, or selecting appropriate technological solutions.
- Cloud solutions: Many IT companies specialize in implementing and managing cloud solutions, such as data storage, application hosting, and data analysis platforms.
- IT security: Protection against cyberattacks, security audits, implementing security policies, and network monitoring are just some of the IT companies' responsibilities in this area.
- IT infrastructure management: In this area, a company may manage servers, databases, networks, and endpoints.
- Technical Support and Service: An IT company may provide support for its own products or general IT support for other companies, managing their technology on a daily basis.
- Training: Many IT providers also offer training in software use and secure technology use.
- Hardware Solutions: Some IT companies may also provide and configure computer, server, or network hardware.
Depending on their specialization and size, an IT company may offer one, several, or all of the above solutions. When choosing a provider, it's important to thoroughly understand their services and tailor them to your individual needs.
At Support Online, we have been supporting companies for years with
- comprehensive user support (both on-site and remotely),
- we service computers, phones, tablets, and related network issues,
- we specialize in server administration: Windows, Linux/Unix,
- we support virtualizers such as KVM, Hyper-V, VMWare, and Proxmox,
- we support cloud services, particularly solutions such as Azure, Microsoft 365, and AWS,
- we monitor servers and devices on the internet,
- we consult on development, DRP, and support the stability of your business in the IT layer.
If you're looking for a good IT company, Support Online is the right place to grow your business.
It's worth using an IT company like Support Online when:
- You plan to implement new technologies or software in your company.
- You need specialized technology consulting.
- You want to optimize existing IT processes.
- You struggle with digital security issues.
- You need support in managing your IT infrastructure.
- You lack internal resources or expertise to implement certain technology projects.
Using external IT experts can bring benefits in terms of saving time and resources, and ensuring high-quality solutions.
Hiring an IT company like Support Online offers several key benefits over an IT freelancer:
- Support from the entire team: An IT company has a full team of specialists, from DevOps specialists and Cyber Security Specialists to IT Helpdesk Specialists, who possess diverse skills and experience, enabling faster problem resolution and the implementation of more complex projects.
- Reliability and stability: IT companies have an established reputation and track record, which can translate into greater reliability and stability of services.
- Maintenance and support: An IT company can offer service contracts, warranties, and after-sales support, which may be more difficult to obtain from an individual freelancer.
- Resources: Companies have access to more resources, tools, and technologies that can accelerate and improve project execution.
- Long-term availability: The risk of a freelancer disappearing or changing careers is greater than the risk of a well-established company going out of business.
However, it's worth noting that the choice between a company and a freelancer depends on your specific needs and situation. If you value peace of mind and a quick response to unexpected problems, it is worth choosing an IT company such as Support Online.
Partnering with IT Support Online offers the following advantages:
- Professional IT outsourcing: The company guarantees high-quality IT outsourcing services for businesses of all sizes.
- Comprehensive IT support: IT Support Online provides comprehensive IT support that meets the diverse needs of businesses.
- Saves time and money: With our support, clients can focus on their core business activities while reducing the costs associated with information technology management.
- Serving a diverse range of businesses: The company specializes in serving both small and medium-sized enterprises and large corporations, demonstrating its flexibility and ability to adapt to diverse client needs.
- Leadership in IT outsourcing: The company is recognized as a leader in IT outsourcing, particularly in the Poznań and Warsaw regions.
By partnering with our company, IT Support Online, businesses can count on a high standard of service and professionalism at every stage of the relationship.
