Baseline - Silver
SOC-as-a-Service – Managed / Hybrid (Cloud SIEM and XDR) - Baseline Plan
We collect events and logs from the critical components of your perimeter and internal network such as Next-Generation Firewall (NGFW), (Web Application Firewall) WAF, Intrusion Prevention Systems (IPS), Mail Security, Internet Routers, Active Directory, Exchange, Endpoint Security and so on (up to a maximum of 100 log sources).
Pre-defined cyber security dashboards and reports are automatically generated and provided to your organization on daily, weekly and monthly basis that summarize your cyber risk posture on the internet and internal networks. The monthly report contains a summary of security incidents identified.
Security Event Logging and Monitoring Service
- Log capturing for customer’s critical perimeter and internal network components
- Log retention
- Event monitoring, correlation, analytics and alerting
- Advanced Machine Learning based Threat Correlation
- Reporting (daily, weekly, monthly)
- Near real-time incident notification
Baseline Silver: Comprehensive Protection
Round the clock
Reduction in Alerts
BASELINE - SILVER
Baseline
SILVER
- NG-SIEM, UEBA and Open XDR
- Cyber Threat Intelligence
- Machine Learning Threat Detection
- Managed Detection and Response (MDR)
- 50-100 Log Sources *
- On-Premises Log Sources
- Cloud IaaS Log Sources
- Office 365 Monitoring
- 3 Months (Hot Storage)
- 6 Months (Warm Storage)
- 12 Months (Cold Storage) ***
- 2000 Events per Second **
- Access to CSOC Dashboards (Read-Only)
-
Monthly Report
Quarterly Report - Leverage In-House Library of Threat Detection Use Cases
- MITRE ATT&CK Coverage
- Threat Hunting
- Call Center Support
- Digital Forensics and Incident Response (Add-On)
- Managed Vulnerability Assessment (Add-On)
- Managed Perimeter Penetration Testing (Add-On)
- Managed Web Application Scanning (Add-On)
* Log sources can be added with a custom-tailored package
** Events per Second (EPS) can be added with a custom-tailored package
*** Log Retention longer than 12 months can be added with a custom-tailored package