The managed service ProActive Security Operation Center (PSOC) monitors cyber security incidents on cloud environments and provides immediate reactions to these incidents, with the assistance of our cyber analysts. Our unique service proactively identifies and mitigates the risks posed by vulnerabilities that can directly impede your business continuity. The PSOC features managed 24/7 monitoring with ongoing SIEM optimization, based on leading SIEM and IR platforms, with ongoing SIEM optimization, security log retention and advanced response. Our advanced capabilities integrate cyber threat intelligence with ongoing cyber security monitoring. Focused alerts are based on global intelligence, customer related sectorial intelligence or targeted intelligence with active monitoring, mentions of customer resources and identifiers in the dark and deep networks and suspicious forums. Proactive threat hunting focuses on ongoing investigation of received alerts and security-related log data, for detection and identification both of potential cyber security attack and of data breaches from various attack vectors.

Deliverables:

We offer four levels of PSOC service:

Bronze

• MSSP Monitoring- in business hours
• SIEM Platform- Microsoft Sentinel.
• Monthly SIEM security enrichment
• Response methodology- Customer update

Silver

• 24/7 MSSP Monitoring
• SIEM Platform- Microsoft Sentinel.
• Monthly SIEM Optimization
• Monthly SIEM security enrichment
• Response methodology- Customer update

Gold

• 24/7 MSSP Monitoring
• SIEM Platform- Microsoft Sentinelon cloud.
• Monthly SIEM Optimization
• Monthly SIEM security enrichment
• ProActive threat hunting
• Response methodology- First Aid IR

Platinium

• 24/7 MSSP Monitoring
• SIEM Platform- Microsoft Sentinelon cloud. No limit log sources
• Monthly SIEM Optimization
• Monthly SIEM security enrichment
• ProActive threat hunting
• Response methodology- First Aid IR

Highlights

• First Aid Remediation Response: Most MSSP Centers simply notify you of cyber incidents and leave it up to you to respond. We believe that only by providing immediate reaction, based on pre-approved playbooks, can we provide efficient first aid.

• Cyber leaders with a focus on Microsoft Azure and 365 cyber protection: Combining a hands-on attitude, in-depth understanding, and profound experience specifically for Azure cloud, we tailor cybersecurity measures for your environment, including collection and analysis of security-related logs from the Microsoft Security cutting-edge toolbox, such as Sentinel, MCAS, Defender for Endpoint, Defender for 365, Defender for Cloud, Azure WAF, Azure Firewall, Intune, Security Center and more.

• Continuously Enriched Monitoring: Our staff writes new rules and improves the existing ones for your monitoring tools. Additionally, they will connect your tools to new intelligence and log sources. In-depth and close knowledge of customer networks and systems, combined with incomparable practical experience of cyber experts, we provide professional and quality monitoring for your environment.