Members of our DFIR team work closely with your SOC and information security personnel to gather pertinent details about your organization prior to embedding ourselves with your team.
While collaborating with your team, we’ll leverage our IR, threat hunting, and forensics expertise across a variety of investigations and engagements to:
The end result is more capable SOC personnel and an engagement summary with key observations and proposed recommendations for increased proficiency.
During our blue team exercises, we’ll work closely with your various SOC teams in order to increase identification, incident response and readiness capabilities. These exercises are commonly performed in combination with a penetration test or red team exercise as a purple team engagement. The combined effort and communications with both teams will allow us to:
As part of this exercise, IR specialists will work collaboratively with your team to:
Certifications
