Overview
The Mandiant Advantage (https://www.mandiant.com/advantage) platform is a controls-agnostic software-as-a-service (SaaS) suite of products that automates Mandiant expertise and intelligence into customer environments. Mandiant Advantage: QuickStart Guides are designed to assist our customers with access to all entitled resources and additional resources from one organized reference, enabling rapid user orientation and time to first value.
Mandiant Advantage Subscriptions
- Threat Intelligence: Mandiant Threat Intelligence provides customers with intelligence on who is most likely to attack them, how they are going to attack, and what tools they will use. This allows customers to prepare their defenses against an imminent attack. Subscriptions include Fusion, Security Operations, Vulnerability, and Digital Threat Monitoring (DTM).
- Automated Defense: Mandiant Automated Defense is software that acts as a virtual Mandiant analyst, enriching and correlating alerts and events across the security environment with Mandiant Threat Intelligence to deliver scoped and escalated investigations.
- Security Validation: Mandiant Security Validation is a risk management technology informed by the Mandiant Intelligence Grid representing active adversary tactics, techniques, and procedures (TTPs). The Security Instrumentation Platform leverages authentic, active attack and actor TTPs to automate a testing program to capture real data on how your security controls are performing. Visibility gained from automated and continuous validation enables your security team to optimize your environment and make the right investments in the future. Security Validation can be delivered as on-prem or SaaS-based technology, either operated side-by-side with your team or provided as an outcome-based service fully managed by Mandiant experts.
- Attack Surface Management: Mandiant Advantage Attack Surface Management helps companies understand their digital footprint and focus on the vulnerabilities that hackers are most likely to target.
- Customer Success: Helps customers onboard and actively get value from Mandiant Advantage subscription capabilities through strategic guidance and deep technical subject matter expertise addressing specific needs and integrations related to customer processes and workflows.
Mandiant Advantage Support
Our technical support staff is focused on Mandiant Threat Intelligence, Automated Defense, and Security Validation products. Customer Support coverage is 24 hours a day, 365 days a year. Issues are escalated by priority scope. See support (https://mandiant.com/support) for full details.
QuickStart: Attack Surface Management
Mandiant Advantage Attack Surface Management (MA-ASM) discovers and analyzes internet assets across dynamic, distributed and shared environments. It continually monitors discovered assets for exposures and enables intelligence and red teams to operationalize and inform risk management. This helps organizations to better understand their digital footprint and focus on the vulnerabilities that hackers are most likely to target.
Getting Started Checklist
To facilitate a good start with your MA-ASM subscription, below is a list of recommended first steps you can take:
Sign In to MA-ASM
- Access asm.advantage.mandiant.com and sign in. Alternatively, sign in to Mandiant Advantage and use the app switcher to navigate to Attack Surface Management.
Select or Create a Project
- A Project is a workspace where you can organize your Collections (lists of assets to monitor), data analysis results, and who has access to them.
- You can have multiple Projects, with differing levels of access to each.
Create a Collection
- A Collection is the starting point of external asset discovery, defining the initial scope. A Collection is comprised of Entities, Issues, and Technologies.
- Use a Workflow to identify a few key starting Entities, called Seeds, and let MA-ASM uncover other Entities that are exposed to the internet.
- Create multiple Collections and store them in Projects that are accessible to designated team Members.
Invite Members
- After users have been added to MA-ASM using the Mandiant Advantage User Management application, they must be assigned a collection-level role to view or manage aspects of a Collection.
- For more information, see ASM Roles and Permissions.
Set up Notifications
- Both email and chat-based alerting mechanisms are available to ensure that you can easily monitor changes.
Configure Integrations
- A variety of inbound and outbound integrations are available.
Documentation & Collateral
To help you get the most out of MA-ASM, below is a subset of relevant documentation available via the Mandiant Advantage documentation portal (https://docs.mandiant.com/home/attack-surface-management).