Consulting Services

• Focus:
  • Threat detection primarily focuses on identifying and preventing potential security threats in real-time or near real-time.
• Methodology:
  • It involves monitoring and analyzing network traffic, system logs, runtime behavior, and other data sources to identify patterns or anomalies that may indicate a security threat.
• Goal:
  • The goal of threat detection is to quickly identify and respond to malicious activities, such as unauthorized access, malware infections, or other suspicious behavior.
• Time Sensitivity:
  • Threat detection is generally more focused on immediate response and may not involve deep forensic analysis. It aims to stop or mitigate an ongoing security incident.

We deploy and support below technologies:

• Velociraptor IR
• OSquery Defense Kit + IR scripts
• Splunk
• Elastic Security
• Runtime Security:
  • Falco
  • Tracee
  • Tetragon
• Sysmon
• Sandfly Security
• Zeek NIDS
• Suricata NIDS
• MISP
• Wazuh XDR
• Arkime Full Packet Capture
• Strelka
• Sigma rules
• Yara rules