Important:
Suspending the Managed Detection and Response Service stops the receipt of new investigation tasks and the sending of logs to the Threat Investigation Center server. Apex Central does not cancel any ongoing tasks and the results are still sent to the Threat Investigation Center server.