Step 1: Analyze
- Analysis of security logs captured on NovaCommand
- Identify threats, vulnerabilities and weaknesses
- Verify and validate discoveries with multiple threat intelligence sources
Step 2: Investigate
- Gather additional information to enhance analysis context
- Validate detected threats and events against customer environment to eliminate false positives
Step 3: Report
- Provide monthly / quarterly report covering 3 key aspects:
- Business impact analysis
- Security gap analysis
- Long term improvement plans and recommendations
Malware Events
- Ransomware, crypto-mining, worms, botnet
- Malicious C&C traffic
- Suspicious files
Attack Events
- In-depth analysis of exploit attacks
- Webshell Upload attempts
- Web application attacks
Vulnerabilities
- Software configuration analysis
- Suspicious and abnormal data exfiltration analysis
- Web plain text transmission (external)
- Weak passwords
Threat Events
- Intranet threat analysis
- Network security abnormalities Web plain text transmission (internal)
- Unauthorized scanning behavior
Intrusion Behavior
- Password brute force events
- Lateral traffic movement
- Inbound web application attack
Protocol and Services Audit
- Protocol misconfiguration
- Unencrypted protocol use
- Protocol version analysis
Tap into expert insights & best practices
ForeNova’s experts share valuable insights, best practices, customer challenges and industry trends. Learn from security practitioners and thought leaders on how to best protect your business from new and persistent cyber threats.
