Active Incident Response — Max Technologies

Engagement triggered by an active or suspected security incident. Time-and-materials structure with 24/7 availability. Includes Falcon Insight XDR deployment, Falcon Forensics for historical data collection, OverWatch threat hunting, containment guidance, and defensible findings suitable for cyber insurance claims, regulatory disclosure, and legal proceedings. Retainer customers prioritized during capacity constraints. Customer receives full Falcon platform access at no platform cost during the engagement.

• Falcon Insight XDR deployment for real-time threat detection and response
• Falcon Forensics for deep historical data collection across the affected environment
• CrowdStrike OverWatch expert threat hunting for the duration of the engagement
• Containment guidance from senior incident response engineers
• Defensible findings report written to standards suitable for cyber insurance, regulatory disclosure, and legal proceedings
• T&M cap available via private offer — set a ceiling before work begins

Delivered by a CrowdStrike Services Partner founded by a former early CrowdStrike employee. As an authorized AWS Marketplace seller, Max Technologies enables frictionless procurement through your existing AWS committed spend (EDP).

• Duration: Variable
• Engagement model: Time and materials (cap available)
• Pricing: starts at $500/hr USD (final scope and cap via private offer)
• Platform: customer receives applicable Falcon platform access at no platform cost for the duration of the engagement