MONITORING AND INCIDENT RESPONSE (MDR)
Main Features of the Service
- 6 Security Operations Centers (SOCs) nationwide
- Two monitoring lines and two analytics lines for round-the-clock surveillance
- Dedicated support team including a security analyst and a service manager to ensure continuous protection and prompt response.
- Access to indicators of compromise and signatures from the Techfirm center
- Ongoing development of custom attack detection scenarios, including tailored solutions based on client requests.
- Comprehensive assistance in investigating and responding to incidents of any complexity
- Quick integration of data sources to streamline the investigation and response process.
Key Benefits
Informativeness
- Interactive visual dashboards in both your personal account and the Security Dashboard
- Regular notifications through messaging platforms and email
- Enhanced incident data with insights from your systems
Flexibility
- Tailored solutions to meet diverse business needs, with experience across various industries and company sizes
- Customizable alert routing based on specific criteria
- Unlimited sources and the ability to replace them as needed
Maturity
- Trusted technologies with over 25+ years of experience and hundreds of satisfied clients
- Well-established processes for client collaboration
- Continuous monitoring and testing of solutions in our own SOC to ensure reliability.
Technology Overview
MDR Service Implementation
Proactivity
- Threat Intelligence: Access to one of Russia’s largest threat databases, updated daily
- Threat Hunting: Continuous background threat scanning across all clients for proactive risk mitigation
Technologies
SIEM System:
- Pre-configured connectors to multiple sources
- Over 300 unified scripts running on supported sources
- Utilizing leading SIEM solutions like Max Patrol SIEM and KUMA
Control
Management & Status:
- Personal account with real-time service updates
- Security Dashboard with advanced analytics and data visualization
- Regular and custom reports for comprehensive oversight
Team
4 Monitoring Lines + Techfirm:
- 24/7/365 event processing via SIEM
- Incident invoicing and expert investigation from Techfirm
- Dedicated Service Manager and Analyst
- Expertise in safeguarding critical national infrastructures.