Cynclair

• Collect and keep log traffic in 90 days in compliance with the Computer-related Crime Act
• Maintain the log collection from agents and gather raw data from Firewalls and customer’s assets
• Ensure logging of appropriate feeds and correlation to Cloud

• Advanced Threat Detection
  We engineered our own detection using the advanced Artificial Intelligence / Machine Learning for behavioural-based detection. We have also developed our own software agents for detailed log generation to detect even the most demanding adversaries
• Threat Intelligence Fusion
  We manage and continuously update the threat intelligence database in real-time for you to detect the latest threats which is a complex task requiring special expertise, process and technologies
• Threat Hunting
  We don't just wait for the alerts to pop-up, we use the proactive approach to hunt threats in your environment
• Fast Detection and Response Time
  We are veteran cybersecurity specialists working to ensure your organization can detect and respond to threats before they erupt

• Certified Incident Response Experts
  All of our incident response specialists are named and certified professionals who will be working as your close ally to remediate the incidents
• Incident Response Best Practices
  Our team follows best practices for incident response e.g. NIST 800-61r2 and have always been continuously improving our SOC processes
• Context-Driven Response
  We understand your environment as you do. The incident response processes and methodologies are adapted according to the importance of the device, the vulnerabilities, and the user's privilege level. All these are taken into consideration for error-free incident response
• Automation and Integration with Current Security Technologies
  We can integrate with your existing security technologies for automated, real-time incident response

Brand monitoring including brand protection, data leak detection and awareness of your attack surface

• Malicious domains
• Social media impersonations
• Phishing sites, emails, and posts
• Account takeover
• Malicious posts and comments
• Fraud and scams
• Leaked information
• And more…

• Develop CSOC standard operating procedures (SOP) and revise them when changes occur
• Tune the SIEM analytics to minimize false positives
• Enhance cybersecurity and IT team with essential cyber exercise
• Provide advanced intrusion detection capability; build, test, and deploy customized SIEM correlation signatures
• Ensure all CSOC systems and applications are available and under operation
• Provide monthly reports which consists of a summary of all CSOC activities, performance metrics, security incident status and actions accomplished for the period