DIGITAL FORENSICS AND INCIDENT RESPONSE

• Incident response playbooks/runbooks with SIEM optimization

  > Determining what SIEM optimization add-ons need to be implemented to determine the current threats being detected.

  > Engineering methods of research and structured steps on how to automate the settings of the SIEM and link them to cyber threat intelligence system

  > Determine any redundant process already being used and how to optimize the security team’s efficiency.

• Forensic services

  > Initial assessment of incident, including following the order of volatility in extracting evidence.

  >Consistent process for incident response procedures and handling documents to adhere to law enforcement standards

  >Support the business owner on the remediation plan and providing direction on the After-action report on the next steps forward during and after the investigation

• Malware Analysis and Reports

  > Engineer ways to identify new zero day malware and how to mitigate it

  > Assist the team internal engineer team in building in house sandboxes to safely execute unknown malicious program and record IOCs for better threat intelligence

  > Provide training and knowledge to the team in identifying host and network based malware infections and how to detect C2 servers

• Expert witness testimony and Legal Services

  >We offer services for all of our clients to appear as an expert witness in any digital  crime related incident.

  >Dedicated legal experts in digital crime that can help guide firms through a data breach or any cyber related crime

• Incident response training

  >Design relevant scenarios for the organization for table-top exercises.

  >Provide facilitation services for live training

  >Evaluate tools, processes, and procedures that align with industry best practices