Essential MDR — foundational managed detection on the NOGTUS evidence backbone.
Essential MDR is the entry tier of OXCULUS NG-MxDR — engineered for organizations that need credible 8×5 managed detection without the operational weight of a full 24/7 SOC engagement. Coverage runs the Indonesian business day with on-call escalation outside hours. Detection draws from the production NOGTUS rule corpus, calibrated to the customer's environment but without bespoke detection-engineering sprints. Each finding inherits the NOGTUS log_id (UUIDv7) and reasoning chain — the same evidentiary backbone that governs the upper tiers — so an Essential customer who later upgrades to Pro or Enterprise carries forward continuous evidence rather than restarting an audit trail.
Essential MDR adalah tier masuk OXCULUS NG-MxDR untuk organisasi yang memerlukan pemantauan terkelola 8×5 yang kredibel tanpa beban operasional SOC 24/7 penuh. Cakupan berjalan pada jam kerja zona waktu Indonesia dengan eskalasi on-call di luar jam. Setiap temuan mewarisi log_id (UUIDv7) dan reasoning chain NOGTUS yang sama dengan tier atas — sehingga pelanggan Essential yang naik tier ke Pro atau Enterprise membawa serta jejak evidensi yang berkelanjutan, bukan memulai dari nol.
SERVICE PILLARS
What this service delivers, structurally.
PILLAR
8×5 Coverage with On-Call Escalation
Live SOC analyst coverage during Indonesian business hours (08:00–17:00 WIB). Critical alarms outside hours flow into an on-call escalation channel with a defined response window. The tier is honest about the coverage shape — it is not 24/7 dressed up.
PILLAR
NOGTUS Rule Corpus, Tuned to Environment
Detection draws from the maintained NOGTUS rule corpus. Per-customer tuning is applied during onboarding and re-tuned quarterly. Bespoke rule-engineering is reserved for higher tiers — Essential is rule-corpus-led, deliberately.
PILLAR
Evidence Continuity for Future Upgrade
Findings carry log_id and reasoning chain identical to higher tiers. When an organization grows into Pro or Enterprise, no historical evidence is invalidated; the lake simply continues under denser coverage.
SERVICE INCLUSIONS
What you get, in commercial-package terms.
Coverage window
8×5 Indonesian business hours + on-call critical escalation
Detection scope
NOGTUS production rule corpus + customer-environment tuning
Investigation depth
Tier-1 triage with structured Tier-2 escalation path
Lifecycle handling
NIO ticketing with defined SLA per severity
Evidence backbone
Full log_id (UUIDv7) + reasoning chain inheritance
Organizations under a 24/7 regulatory operating obligation (POJK Tier-1, BSSN sectoral critical), or with an incident-frequency profile that justifies continuous coverage. Those should evaluate Pro MDR or Enterprise MxDR.
READY TO ENGAGE
Engineer this service into your security operations posture.