Gartner defines co-managed security monitoring as services that provide remote maintenance and monitoring of client-owned threat detection, investigation and response (TDIR) capable platforms. These services ensure availability and performance of the system and provide professional services consultancy in a wide range of functions. Examples include the creation of use cases, detection engineering, configuration of APIs, data normalization and reporting content.