S.O.C. – five Key Capabilities.
Detection
Real-time analysis of events and alerts that are received by the client’s detection systems and the process of effective and focused threat identification.
Visibility
24/7 monitoring and surveying of the client’s relevant systems, in order to identify and isolate malicious or unauthorized activities.
Intelligence
Unique form of intelligence information collection from the indexed web, the deep-web and the dark-net.
Remediation
The process of eliminating the threat and enabling the organization to return to full business functionality in the most timely and cost effective manner.
Containment
Providing an immediate and appropriate response according to incident type.