01 ·
Vectra AI · NDR + ITDR + cloud
driven par lIA detection on network, identity (AD/AAD), cloud (AWS, Azure, M365). Per-entity prioritisation reduces alert volume by 80%. Strong on lateral movement, Pass-the-Hash, Golden Ticket, AAD compromise.
MDR sur Vectra AI Platform: NDR + ITDR with entity-based prioritisation.
The Fortgale SOC européen 24·7·365 on the Vectra console. AI prioritisation per entity (host · account · identity), ~11 min median containment, response via native integrations.
Fortgale × Vectra AI
MDR · live
Sensore Vectra AI attivoTelemetria endpoint · cloud · identità
Vectra AI SOC italiano 24·7·365Analisti L2/L3 · interlocuzione diretta
Fortgale Tier-zero AI multidominioRumore ridotto del 94%
Fortgale Risposta nativa Vectra AIIsolamento host mediano ~8 s
Live Intelligence proprietaria34 000+ IOC settimanali · attori italiani
Fortgale MDR operativo — Vectra AI + Fortgale SOC attivi
Conformità
ISO/IEC 27001
NIS2 ready
DORA aligned
GDPR · ACN
Partnership tecnologica
Vectra AI Platform
MITRE ATT&CK aligned
OpenCTI
Pourquoi Fortgale + Vectra AI
Network + identity AI detection, governed by senior analysts.
Vectra AI is Gartner Leader for NDR + ITDR. Particularly strong on lateral movement and identity-based attacks. Fortgale l'opère avec analystes européens who know the European actor TTPs leveraging these vectors.
02 ·
SOC européen 24·7·365
L2/L3 analysts spécialisés sur identity attacks. Triage <15 min on Vectra alerts. Custom rules for European environments. 34,000+ IoCs per week applied as Watchlists.
03 ·
Cross-tool response + IR
Containment via Vectra integrations: EDR isolation, AD lockout, firewall block, AAD revocation. Escalade directe to Fortgale IR. Accompagnement complet à la notification CSIRT national NIS2 notification.
Comment ça marche · architecture
Quatre blocs, un cycle MDR on Vectra.
From Vectra sensor ingestion to cross-tool response — le tout gouverné par Fortgale with analystes européens and proprietary CTI sur les marchés européens.
01 ·
01 · Ingestion
Vectra sensors active
Network sensors (NDR), AD/AAD integrations (ITDR), cloud (AWS, Azure, M365). Telemetry on Vectra Cloud + Fortgale data fabric for corrélation cross-customer.
02 ·
02 · Tier-zero
AI prioritisation per entity
Vectra AI scores risk per host, account, identity — not per alert. Fortgale tunes scoring on European context. Faux positifs réduits by 80%.
03 ·
03 · Analysts
Nos L2/L3 sur la console
European SOC spécialisés sur identity-based attacks. Triage on entities, attribution to actor (Scattered Spider, APT29, FIN12). Decisions dans votre langue business.
04 ·
04 · Response
Cross-tool + IR
Containment via Vectra integrations: EDR isolation, AD lockout, firewall block, AAD revocation. Escalade directe to Fortgale IR for incidents critiques.
Proof · metriche del servizio
Quattro numeri che reggono l'MDR su Vectra AI.
Metriche misurate sulla telemetria reale dei nostri clienti — Q1 2026, aggiornate trimestralmente.
~11 min
Confinement médian
from confirmed Vectra alert
from confirmed Vectra alert
80 %
Volume reduction
via entity prioritisation
via entity prioritisation
NDR+ITDR
Network + identity
+ cloud unified
+ cloud unified
10 days
Onboarding complet
Vectra AI Platform
Vectra AI Platform
Ce que comprend le service
MDR sur Vectra AI, en détail.
Every component designed to leverage Vectra entity prioritisation with European SOC governance and proprietary CTI.
01
Managed Vectra AI Platform
Vectra licensing (or existing instance). Network sensors, AD/AAD integrations, cloud connectors managed by Fortgale. Continuous tuning per environment.
02
Identity détection des menaces
Vectra ITDR governed by Fortgale on AD on-prem + Entra ID + AAD. Detection of Kerberoasting, Pass-the-Hash, Golden Ticket, AAD impossible travel, OAuth abuse.
03
Network detection (NDR)
Vectra Detect on network: lateral movement, C2 beaconing, data staging, exfil. Native integration with proprietary CTI for IoC enrichment.
04
Cross-tool response
Containment orchestrated via Vectra integrations: EDR isolation (CrowdStrike, SentinelOne, Defender), AD lockout, firewall block, AAD session revocation.
05
Reporting & governance
Executive reports with MTTD, MTTR, entity risk trends, attack progression. Per-incident technical reports. NIS2/ISO 27001/GDPR audit documentation.
06
Threat hunting on Vectra
Monthly hunting on Vectra Recall using proprietary CTI + Sigma rules. Focus on identity-based attacks, lateral movement and silent C2 not caught by automatic detections.
Per chi · due angolazioni
Stesso MDR su Vectra AI, due angolazioni.
Il CISO decide sul rischio. Il responsabile IT decide sul runbook. MDR Fortgale produce evidenze per entrambi.
Per il CISO
Un runbook nominativo per attore, su stack Vectra AI.
Il CISO riceve ogni mese il profilo dei 3 attori più probabili contro il proprio settore, con il runbook MDR Fortgale già mappato sulla telemetria Vectra AI Platform.
- Threat briefing mensileAttori, TTP osservate, campagne in corso sul vostro settore.
- Runbook su Vectra AIPlaybook vivi mappati MITRE, eseguibili sulla console Vectra AI Platform.
- Reporting board-readyRischio · impatto · decisione. Niente tecnologia da slide.
Per il responsabile IT
Zero handover traduttore. Analisti italiani sulla vostra console Vectra AI.
Quando l'alert Vectra AI è reale, il tempo di decisione è il tempo di contenimento. I nostri analisti L2/L3 conoscono la console Vectra AI Platform e hanno mandato di decidere.
- Contenimento mediano ~11 minDall'alert confermato alla remediation in produzione.
- Risposta nativa Vectra AIKill processi, isolamento host, network containment via API Vectra AI Platform.
- Integrazione end-to-endTelemetria Vectra AI ingerita nella nostra data fabric multidominio.
FAQ · frequently asked
Everything to know before talking to our analysts.
What is the Fortgale MDR service on Vectra AI?
Combines Vectra AI Platform (NDR + ITDR + cloud detection) with the Fortgale SOC européen 24·7·365. L2/L3 analysts monitor the Vectra Recall/Detect console, leverage AI entity prioritisation and trigger response via native integrations (firewall, EDR, IAM).
What does it mean that Vectra prioritises by entity?
Vectra applies AI to score risk not per single alert but per entity (host, account, identity). It reduces alert volume to manage by grouping them around 'what matters', accelerating triage and reducing noise.
Do I need to already have Vectra?
No. Fortgale handles the full cycle: licensing, réseau sensor deployment, integrations configuration (cloud, identity, EDR), tuning. Available both on existing instance or as part of the service.
Is the service NIS2-compliant?
Yes. We support NIS2 transposition requirements: monitoring continu, IoC collection for national CSIRT notification sous 24 heures, technical documentation for 72-hour notifications.
Is Vectra only NDR or does it cover identity and cloud too?
Vectra AI Platform covers NDR (network detection), ITDR (identity détection des menaces for AAD/AD), cloud (AWS, Azure, M365). Particularly strong on detecting lateral movement and identity-based attacks (Pass-the-Hash, Golden Ticket, AAD compromise).
Parla con il presidio
Un incontro. Un NDA. Un runbook reale su Vectra AI.
Ti portiamo il Report sul tuo settore con gli attori più probabili e un runbook MDR concreto sulla tua console Vectra AI Platform.