During our threat discovery engagements, we leverage your existing toolsets and data sources in conjunction with supplemental security solutions that can be deployed as part of the engagement to achieve the necessary environmental visibility.
Full visibility across network, endpoint, logs and other data sources allows our team to obtain current and historical situational awareness that ensures a holistic view of any potential threats acting within your environment.
Typical threat discovery activities include the below components to ensure the required environmental awareness:
- Network traffic analysis
- Host analysis and mass triage of forensic artifacts
- Log collection and review
- Malware analysis and reverse engineering
- Integration of threat intelligence
