Yes. One of the benefits of managed protection, especially with EDR, is the ability to identify suspicious behaviour quickly and take action to contain or remediate issues faster than an unmanaged setup would usually allow.