SAFELY ENABLING BUSINESS Providing Targeted Threat Intelligence as a Service Threat Intelligence is a broad term that can carry many meanings in the field of cyber security. The SecureDetect Intelligence service, rather than focusing on technical threat intelligence and feeds of known IOCs, looks to provide a broader, more business-focused Threat Intelligence including: • Operational Threat Intelligence, looking at identifying attacks or potential security incidents across the open web, as well as closed sources. • Tactical Threat Intelligence around common Tactics, Techniques and Procedures (TTPs) used by adver- saries, with a focus on customer-specific industry or systems. • Strategic Threat Intelligence, collected and distribu- ted by our Cyber Defence Centre (CDC) and Incident Response (CSIRT) teams. Looking at the latest trends, threats and digital risks and assessing the impact on our customers, their peers and their key third party partnerships. Many companies already undertake these activities in their traditional “internal” networks. But as digital transformation has become a global initiative for businesses of all shapes and sizes, managing digital risks outside of that traditional infrastructure has never been more important. The primary goal of Targeted Threat Intelligence should be to provide further context to Security Operations Centre (SOC) activities being undertaken already by an organisa- tion such as Security Information and Event Management (SIEM) or Vulnerability Management. SecureLink helps organisations identify and manage their digital risk. With a comprehensive coverage of Open, Deep and Dark Web sources, SecureLink identifies potential cyber threats and breaches, as well as monitoring customer-owned digital assets for brand, data and infrastructure exposure. Expertise in Cyber Threat Intelligence • 5 Cyber Defence Centres across the globe. • Over a quarter of a million security events processed in 2018. • Strategic partnership with Digital Shadows and their market-leading SearchLight™ platform. • CREST certified Computer Security Incident Response Team (CSIRT) operating inter- nationally with vast experience including military intelligence services. • Dedicated research team tracking threats, trends and adversaries continuously. • Cyber Security Advisory practice, aligned to customer’s digital risk management programmes. D a t a l o s s p r ev e n t i o n O n l i n e b r a n d s e c u r i t y A t t a c k s u r f a c e r e d u c t i o n Ahead of the attack through smart visibility SecureDetect Intelligence SecureLink is the market leading provider of cyber security in Europe. www.securelink.net © SecureLink
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
SAFELY ENABLING BUSINESS
Providing Targeted Threat Intelligence as a ServiceThreat Intelligence is a broad term that can carry many meanings in the field of cyber security. The SecureDetect Intelligence service, rather than focusing on technical threat intelligence and feeds of known IOCs, looks to provide a broader, more business-focused Threat Intelligence including:
• Operational Threat Intelligence, looking at identifying attacks or potential security incidents across the open web, as well as closed sources.
• Tactical Threat Intelligence around common Tactics, Techniques and Procedures (TTPs) used by adver-saries, with a focus on customer-specific industry or systems.
• Strategic Threat Intelligence, collected and distribu-ted by our Cyber Defence Centre (CDC) and Incident Response (CSIRT) teams. Looking at the latest trends, threats and digital risks and assessing the impact on our customers, their peers and their key third party partnerships.
Many companies already undertake these activities in their traditional “internal” networks. But as digital transformation has become a global initiative for businesses of all shapes and sizes, managing digital risks outside of that traditional infrastructure has never been more important.
The primary goal of Targeted Threat Intelligence should be to provide further context to Security Operations Centre (SOC) activities being undertaken already by an organisa-tion such as Security Information and Event Management (SIEM) or Vulnerability Management.
SecureLink helps organisations identify and manage their digital risk. With a comprehensive coverage of Open, Deep and Dark Web sources, SecureLink identifies potential cyber threats and breaches, as well as monitoring customer-owned digital assets for brand, data and infrastructure exposure.
Expertise in Cyber Threat Intelligence• 5 Cyber Defence Centres across the globe.• Over a quarter of a million security events
processed in 2018.• Strategic partnership with Digital Shadows
and their market-leading SearchLight™ platform.
• CREST certified Computer Security Incident Response Team (CSIRT) operating inter-nationally with vast experience including military intelligence services.
• Dedicated research team tracking threats, trends and adversaries continuously.
• Cyber Security Advisory practice, aligned to customer’s digital risk management programmes.
Data loss preve
ntio
n
Online brand security
Atta
ck surface reduction
Ahead of the attack through smart visibilitySecureDetect Intelligence
SecureLink is the market leadingprovider of cyber security in Europe.
www.securelink.net© SecureLink
SAFELY ENABLING BUSINESS
SecureDetect Intelligence The SecureDetect Intelligence service (powered by Digital Shadows) enables you to minimise your digital risk by de-tecting data loss, securing your online brand and reducing your attack surface.
An Extension of Your TeamWhilst techniques such as natural language processing allow us to conduct a certain amount of automated analy-tics, the two most important facets of providing Targeted Threat Intelligence are context and actionability. To get real value out of the Targeted Threat Intelligence that the Digital Shadows SearchLight™ platform provides, human analysis and incident response is required. The Secure Detect Intelligence service wraps in the platform’s broad coverage of sources and the latest techniques in data science and machine learning, with industry-leading intelligence analysts from Digital Shadows and SecureLink’s Computer Security Incident Response Team (CSIRT).
Onbo
ardin
g/Service
Active Response Alerting/R
epor
ting
Monitoring M
anag
ement
• Portal based alerting to incidents
• Weekly tactical advisories
• Monthly reports
• Real-time portal access
• Use case updates and configuration
• Use case driven analysis
• RFIs from customer
• Managed takedowns
• Digital Forensics and Incident Response
• Collection planning/ capturing Seed Data
• Updating Seed Data including regular review
• Setting intelligence goals
9 Search Across Open, Deep & Dark Web
9 Save Queries and Receive Alerts
9 Access Threat Intelligence Feeds
9 Search across Bulk WHOIS Information
9 Access Threat Actor Profiles
9 Identify Exposed Credentials
9 Identify Exposed Sensitive Documents
9 Identify Exposed Intellectual Property
9 Identify Spoof Domains
9 Identify Spoof Social Media Profiles
9 Identify Spoof Mobile Applications
9 Identify Open Ports
9 Identify Exploitable Vulnerabilities
9 Identify Weak or Expiring Certificates
9 Perform Takedowns
68 INCIDENTS
886 ASSESSED BYANALYST
25,035 AUTOMATEDANALYTICS
501,786 MENTIONSONLINE
a SecureLink service powered by
SecureLink is the market leadingprovider of cyber security in Europe.
www.securelink.net© SecureLink
Related Documents
