LiveEDR / XDRPulse
Touchpoint Pulse + Cisco Secure Endpoint
Pulse ingests alerts from Cisco Secure Endpoint so our analysts can triage, investigate and, within actions you pre-approve, contain threats 24/7, using the tool you already own.
What we collect
- Cisco Secure Endpoint alerts and detections
- Host, user and process context for each alert
- Severity and status, kept in sync
What we detect
- Malware and ransomware behaviour
- Credential theft and lateral movement
- Suspicious scripts and hands-on-keyboard activity
What we can do
- 24/7 triage and investigation of every alert
- Host containment through Cisco Secure Endpoint, within your pre-approved authority, where your licence supports it
How it works
- 01ConnectOur team sets up the connection with you during onboarding.
- 02Agree authorityYou choose which response actions we can take without calling first.
- 03TuneWe tune detections to your environment to cut noise.
- 04MonitorAnalysts watch 24/7 and act within your agreed authority.
Every response action is optional and agreed in writing before go-live. Anything outside your pre-approved list, we call you first.
Other EDR / XDR integrations
Cisco Secure Endpoint is a trademark of Cisco. Touchpoint Security is not affiliated with or endorsed by Cisco. Available data and actions depend on your licence and configuration.
Already run Cisco Secure Endpoint?
We’ll show you what Pulse would see in your environment.