Managed Detection & Response
Security experts in our SOC monitor, detect and respond to threats targeting your business - 24/7

Threat Intelligence
Stay ahead of your adversaries with up-to-date, timely and actionable intelligence and tools

Incident Response
Investigate and remediate cyber incidents with Europe's leading response team

thumbnail_mnemonic.png

mnemonic.png

Mnemonic

Services and solutions enabling detection of and response to cyber security breaches.   

Services include those delivered from a Cyber Security Operations Centre (SOC or CSOC) where a 24/7 team monitors for cyber breaches, and responds in real time when breaches are identified.

Solutions include technologies that firstly monitor for breaches, secondly flag when the occur, and thirdly facilitate remediation or best available response to a breach.

Managed Detection and Response (MDR) is generally the term used for the service, and Extended Detection and Response (XDR) is the term used for products or solutions used in MDR.

XDR is broken down into Network Detection and Response (NDR) - which deals with identifying threats at the network level, along with providing the appropriate response, and Endpoint Detection and Response (EDR), which deals with identifying threats at the endpoint, along with providing the appropriate response.

Managed Detection and Response  - MDR - and Extended Detection and Response - XDR

Knowing the current and potential threats that  present the greatest risk to your orgainisation, and proactively ensuring that the right people, process and technology solutions are in place to mitigate against them.

Threat intelligence is information on specific cyber threats to your organisation.  

Threat intelligence moves the goal posts: rather than responding to an attack, threat intelligence enables an attack to be prevented.  This can be anything from breaking up and arresting a cyber criminal group, to identifying the attack vectors and profiles in advance of attack,  then ensuring sufficient protections and mitigations are in place.  

Threat intelligence is gained from large data sources shared between cyber security companies, on global network and dark web activity, and also from honey pots, which are simulations of an actual company network, that then attract the attacks of criminal groups targeting the specific company.

Threat intelligence enables the delivery of ATP / Advanced Threat Protection.

An example of threat intelligence would be identifying domains known to be involved in malicious activity, or indeed domains that are recently registered, as these can often be purposed for cyber attacks. 

A further example of threat intelligence would be identifying activity supporting botnets, such as DGAs, or Domain Generating Algorithms.  A DGA is a malware tool that enables large numbers of domains to be generated, so that whenever one domain is blocked, the malign activity is simply moved across to work from another domain.

Threat Intelligence

Providing the intelligence, insights, toolsets, and analytics, alongside best practice response preparedness, so that, in the event of a cyber breach, your company will be able to mitigate exposure, minimise business losses, and fast track recovery to normal operations.

Incident Response

Understanding network, internet, and systems activity, and being able to flag events that are due to an attack or security breach.