Our fully managed security starts with the SECURE365 Intrusion Detection System (IDS) via sensors. Security analysts continuously monitor your endpoints and network for malicious activities or policy violations that can lead to intrusions and the attacker’s kill-chain. Artificial intelligence technologies within SIEM aid the analysts in detecting compromises to stop them early in this progression.

Analysts use their experience to apply active cyber defense methods. These involve proactively searching client networks to detect threats that are resident in your network to yet be undetected. Threat hunting does not simply wait for correlation rules to alert. Our proactive nature of threat hunting recognises that threats can still try to evade in-place security protections.

The solution is managed meaning that our analysts take the endpoint and network protections through the process of installation, tuning, learning and putting the defences in place for the client system in the correct configuration. Managed also means maintaining the state with the addition of endpoints or the collection of other logs. The Response is the alerting and reporting, remediation of events or managing incidents through to resolution.