MDR For Windows Defender Monthly Invoicing

MDR for Windows Defender invoicing is conducted monthly.

• We at SonicSentry pull numbers for invoicing on the last business day of the month.
• The invoice will be a total of all devices belonging to our partner and the invoice will be provided on the first business day of the month.
• This means the invoice received is for the current month, based on the number of devices from the last business day of the previous month.

Organizations Tab

The Organizations Tab provides non printable breakdowns Number of Locations and associated devices.

• Named Policies can be applied/ removed at the Organizational Level from this view by clicking on the 3 dots and selecting the desired option from the drop down menu.

A general non-printable breakdown of the Location names and number of associated devices can be seen in the portal by selecting Locations from the left hand menu.

• Named Policies can be applied/ removed at the Location Level from this view by clicking on the 3 dots and selecting the desired option from the drop down menu.

A detailed Exportable list of all devices can be seen in the portal by selecting Locations from the left hand menu.

• Clicking on the 3 dots at the top of the list drops down a menu gives options to perform the following functions
• Devices licenses can be assigned/ unassigned
  • Devices MUST be licensed to communicate with the portal, send/ receive telemetry, and receive mitigation and investigation commands from our SOC.  
• Device Groups can be assigned/ unassigned
• Bulk Isolations/ restoration responses can be sent
• Uninstallation commands can be sent to devices
  • Uninstallation commands will wait in queue for up to 6 months for the device to check back in to receive the command.  
• Devices can be moved between Organizations/ Locations
• A complete list of devices can be exported.  After compilation, the file can be located under the Reports tab