Step 1: Analyze
- Analysis of security logs captured on NovaCommand
- Identify threats, vulnerabilities and weaknesses
- Verify and validate discoveries with multiple threat intelligence sources
Step 2: Investigate
- Gather additional information to enhance analysis context
- Validate detected threats and events against customer environment to eliminate false positives
Step 3: Report
- Provide monthly / quarterly report covering 3 key aspects:
- Business impact analysis
- Security gap analysis
- Long term improvement plans and recommendations
Malware Events
- Ransomware, crypto-mining, worms, botnet
- Malicious C&C traffic
- Suspicious files
Attack Events
- In-depth analysis of exploit attacks
- Webshell Upload attempts
- Web application attacks
Vulnerabilities
- Software configuration analysis
- Suspicious and abnormal data exfiltration analysis
- Web plain text transmission (external)
- Weak passwords
Threat Events
- Intranet threat analysis
- Network security abnormalities Web plain text transmission (internal)
- Unauthorized scanning behavior
Intrusion Behavior
- Password brute force events
- Lateral traffic movement
- Inbound web application attack
Protocol and Services Audit
- Protocol misconfiguration
- Unencrypted protocol use
- Protocol version analysis
Nutzen Sie die Erkenntnisse und bewährten Verfahren von Experten
Die Experten von ForeNova teilen wertvolle Erkenntnisse, bewährte Verfahren, Kundenherausforderungen und Branchentrends. Erfahren Sie von Sicherheitsexperten und Vordenkern, wie Sie Ihr Unternehmen am besten vor neuen und anhaltenden Cyber-Bedrohungen schützen können.
