Reports · MDRTrend window: 30d /SOC manager + customer executive readout
MDR Executive Report
Alerts Detected · 24h
—
Triaged by MDR
—
share dispositioned by MDR
Actions · Auto
—
runbook-executed
Actions · Human
—
analyst-driven
Open Cases
—
active MDR investigations
Analysts on Duty
—
tier-1 + tier-2
SLA
—
commitment attainment
MTTA / MTTR
—
acknowledge → resolve
Detection pipeline · last 24h
Loading pipeline…
Rule health · 24h delta
Loading rule health…
Top 5 noisy rules · last 30d
Loading top rules…
Recent MDR wins · top 5
Loading wins…
Cases activity · last 30d · top 10
Loading cases…
Response action catalog · 17 capabilities
Host3
Contain Host · Isolate Endpoint · Kill Process
Network2
Block IP · Block Domain
Identity3
Force Password Reset · Disable User · Revoke OAuth App
IOC2
Block File Hash · Block URL
Evidence & Hunt4
Collect Forensics · Threat Hunt · Investigation Package · Snapshot
Email3
Quarantine Email · Block Sender · Disable Forwarding Rule
Counts reflect available capabilities; no actions taken yet in the current window.
Generated MDR Executive reports
No report history yet. Generated MDR Executive reports will appear here once the BE adds the
mdr_executive report type.