Last month, the Elastic Security Protections Team prevented an attempted ransomware attack targeting an organization monitored by one of our customers, an IT Managed Service Provider (MSP). We analyzed the alerts that were generated after an adversary’s process injection attempts were prevented by Elastic Endpoint Security on several endpoints. Adversaries often attempt to inject their malicious code into a running process before encrypting and holding the victim’s data to ransom.

As 2019 comes to an end, OnPage would like to re-inform MSP teams about the value and importance of offering a 24×7 support service. Twenty-four seven support ensures that client issues are quickly resolved by an after-hours support team. Though 24×7 support is a must-have offering, MSPs must first re-work their internal workflows and policies, ensuring that after-hours servicing is a pain-free venture.

Managed Service Providers (MSPs) are on the hook to deliver reliable, performant, and secure services to their customers. Production issues or security incidents can threaten SLAs, customer contracts, and ultimately business reputations. To state the obvious, MSPs need to understand what is going on in their environment so they can effectively identify and diagnose production issues before they impact customers. This is the idea behind “observability.”