Cysiv experts will then begin monitoring your environment, while escalating security incidents for corrective action, as required.
The diagram provides an overview of what actually happens with our 24/7 Monitoring and 24/7 Monitoring with Management services. With both services, you leverage the power of our SOC-as-a-Service platform, and the benefits of our data science, threat hunting and threat research experts.
We ensure your telemetry is being reliably ingested by Cysiv Command, checking that all Connectors are online and providing the expected flow of telemetry.
And we perform any necessary troubleshooting and maintenance activities.
A “security incident” is automatically generated in Cysiv Command when a suspicious entity is detected by the Cysiv Threat Detection engine.
A Security Incident case is created for detections that cannot be confirmed as benign/FP during triage.
Analysts then investigate the security incident, documenting the following:
We then recommend further investigation steps if the threat is not fully discovered or requires additional information.
Once the incident has been confirmed as a threat:
We manage selected security products by:
We will actively implement and not simply recommend, policy or security control changes to be made to an incident, for the security of products we are managing on your behalf.
© 2021. All rights reserved. Cysiv and the Cysiv Logo are trademarks of Cysiv, Inc. Other marks and names are trademarks or registered trademarks of their respective owners.
