YOUR EMAIL ADDRESS
*
CLIENT NAME
*
CLIENT SHORT NAME (ONLY 4 ALPHA CHARACTERS MAXIMUM)
*
ORG NAME EDR MANAGEMENT PORTAL
*
PRIMARY CLIENT CONTACT FIRST NAME
*
PRIMARY CLIENT CONTACT LAST NAME
*
PRIMARY CLIENT CONTACT EMAIL (WILL NOT BE CONTACTED)
*
ADDRESS
CITY
STATE
COUNTRY
AF
AX
AL
DZ
AS
AD
AO
AI
AQ
AG
AR
AM
AW
AU
AT
AZ
BS
BH
BD
BB
BY
BE
BZ
BJ
BM
BT
BO
BQ
BA
BW
BV
BR
IO
BN
BG
BF
BI
CV
KH
CM
CA
KY
CF
TD
CL
CN
CX
CC
CO
KM
CG
CD
CK
CR
CI
HR
CU
CW
CY
CZ
DK
DJ
DM
DO
EC
EG
SV
GQ
ER
EE
ET
FK
FO
FJ
FI
FR
GF
PF
TF
GA
GM
GE
DE
GH
GI
GR
GL
GD
GP
GU
GT
GG
GN
GW
GY
HT
HM
HN
HK
HU
IS
IN
ID
IR
IQ
IE
IM
IL
IT
JM
JP
JE
JO
KZ
KE
KI
KP
KR
XK
KW
KG
LA
LV
LB
LS
LR
LY
LI
LT
LU
MO
MK
MG
MW
MY
MV
ML
MT
MH
MQ
MR
MU
YT
MX
FM
MD
MC
MN
ME
MS
MA
MZ
MM
NA
NR
NP
NL
AN
NC
NZ
NI
NE
NG
NU
NF
MP
NO
OM
PK
PW
PS
PA
PG
PY
PE
PH
PN
PL
PT
PR
QA
RE
RO
RU
RW
BL
SH
KN
LC
MF
PM
VC
WS
SM
ST
SA
SN
RS
SC
SL
SG
SX
SK
SI
SB
SO
ZA
GS
SS
ES
LK
SD
SR
SJ
SZ
SE
CH
SY
TW
TJ
TZ
TH
TL
TG
TK
TO
TT
TN
TR
TM
TC
TV
UG
UA
AE
GB
US
UM
UY
UZ
VU
VA
VE
VN
VG
VI
WF
EH
YE
ZM
ZW
TOTAL NUMBER OF USERS IN CLIENT ORGANIZATION
*
INCIDENT START DATE
*
LIST OF ASSOCIATED THREATS
*
TERM OF SERVICE DURATION
*
--None--
30 Days
45 Days
6 Months
Annual
BEST ESTIMATED START DATE OF MONITORING SERVICE
*
IN-SCOPE MONITORING PLATFORM
*
ActiveEye Endpoint - Carbon Black
ActiveEye Endpoint - Cortex XDR
ActiveEye Endpoint - Defender ATP
ActiveEye Endpoint - CrowdStrike
ActiveEye SaaS - GSuite
ActiveEye SaaS - O365
NUMBER OF IN-SCOPE ENDPOINTS
--None--
Up to 100
Up to 250
Up to 350
Up to 500
Up to 1,000
Up to 1,500
Up to 2,000
Up to 2,500
Up to 3,000
Up to 3,500
Up to 4,000
Up to 4,500
Up to 5,000
Up to 5,500
Up to 6,000
Up to 6,500
Up to 7,000
Up to 7,500
Up to 8,000
Up to 8,500
Up to 9,000
Up to 9,500
Up to 10,000
Up to 10,500
Up to 11,000
Up to 11,500
Up to 12,000
Up to 12,500
Greater than 13,000
NUMBER OF IN-SCOPE SAAS USERS
--None--
Up to 100
Up to 250
Up to 350
Up to 500
Up to 1,000
Up to 1,500
Up to 2,000
Up to 3,000
Up to 5,000
Up to 10,000
TYPE OF O365 LICENSE
*
--None--
Not Applicable
E1 License
E3 License
E5 License
TBD
TYPE OF AZURE AD LICENSE
*
--None--
Not Applicable
P1 License
P2 License
TBD
LIST OF WHITELISTED COUNTRIES
SHOULD DELTA RISK ALERT ON SUCCESSFUL LOGIN
OUTSIDE US?
--None--
Not Applicable
Yes
No
WHO SHOULD DELTA RISK SEND TICKETS TO?
*
--None--
IR Engagement Team
Customer
Both
ASSIGNED INCIDENT RESPONDER
(NAME - EMAIL - PHONE)
*
CUSTOMER CONTACT INFORMATION FOR NOTIFICATION
(NAME - EMAIL - PHONE)
*
SELECT CONTACT PROCEDURE FOR INITIAL P1 EVENT
*
--None--
Issue Ticket only (email) for 1st notification
Issue Ticket (email) + Phone call for 1st notification
SELECT FOLLOW UP CONTACT PROCEDURE FOR P1 EVENT
*
--None--
Issue Ticket only (email) for Follow Up notification
Issue Ticket (email) + Phone call for Follow Up notification
WILL THERE BE A CUSTOM IOC WATCHLIST?
*
--None--
TBD
Yes
No
SOC PREAPPROVED RESPONSEACTION(LOW RISK)
*
--None--
TBD
No Pre-approval, document only
Pre-approval to blacklist only
Pre-approval to blacklist + delete
SOC PREAPPROVED RESPONSEACTION(HIGH RISK)
*
--None--
TBD
No Pre-approval, document only
No Pre-approval, issue ticket
Pre-approval to blacklist only + ticket
Pre-approval to blacklist + delete + ticket