Defensive Solutions
SOC Continuous Threat Detection
We are speakers at the main congresses and universities in Latam.
We have worked with police, military, OAS, Ameripol and Interpol organizations.
Breach detection in Blue Team processes.
Alert Fatigue Address what really matters (An email is not an alert).
A SOC requires multiple skills that are constantly updated.
Security Operation Center (SOC)
Managed Detection & Response (MDR)
Preparation
- Intelligence and proactive threat hunting processes
- Proficiency and experience in multiple technologies
Analysis
- Alert 360 monitoring
- Experience in log and network analysis
- Automation of Adversary Emulation techniques
- Communication with CERTs, SOC y CSIRT around the world
Containment
- Proficiency in the construction of Playbooks and Detection Rules
- In-house SOAR tool
- Collaborative chanel for notification of alerts and notifications 24/7
Post-Incident
- KPIs y Métricas available to the client inf a SaaS system
- Awareness and hardening guides
With Microsoft as our partner, we receive Zero Day or patch reports 10 days in advance before they are published
In partnership with
Service Structure
Threat Alert Monitoring Service
Stage 1
Analyze and Triage according to playbooks Prioritize according to threat matrix
Stage 2
High complexity analysis Triggered by Stage 1 or Critical Alerts
Stage 3
Specific services according to the requirements needed: Incident Response, Threat Intelligence, Forensics Analysis, Threat Hunting y Pentesting
SOC integration layer
Alerts Management
24/7 information in real time and decision making in a single click
- Messages via Telegram
- Calls according to SLA threat
- Responses via SOC must be established with the client according to the type of alert
- Communication focal points must be defined
- Scaling matrix
SOC
Forensic
The Forensic Analysis focuses on preserving, identifying and analyzing elements linked to possible threats, alerts and security incidents.
Our process includes a complete analysis within the framework of international best practices and compliance. Some of the activities we perform are:
- Investigate the endpoints and any environment that can contextualize and enrich the analysis
- Analyze data published on the Internet linked to a possible data breach of the user's account
- Identify techniques, tactics, and procedures (TTP)
- Identify persistence, credential theft, escalation, and attack propagation
- Identify if the improper access originated from a compromised computer
Experience our unique offense and defense all-in-one cybersecurity solution
Our cybersecurity experts are ready to help.
Either fill out the form or reach out directly to our experts for a call or meeting
