Managed detection and response in 2024

Kaspersky’s 2024 MDR analyst report aggregates global telemetry and SOC investigations to outline key trends: high-severity incidents declined by 34% but grew more complex (longer investigations), human-driven targeted attacks surged, and attackers frequently reengaged post-breach—especially in government. Industrial, financial, and government sectors saw the most incidents overall, while high-severity cases concentrated in IT and government. Living off the Land, User Execution, and Phishing remained prevalent, underscoring the need for XDR/MDR capabilities, SOC maturity, robust configuration and access controls, and ongoing security awareness training.