SolCyber Customer Experience on SolCyber Knowledgebase

SolCyber Service Features

Mon, 01 Jan 0001 00:00:00 +0000

Advanced Email Protection #

Proactive blocking of malicious emails including SPAM, Phishing and BEC

Assist in integration with mail platform
Migration and maintenance of white list and black lists
Monitoring of high risk users against BEC
SOC triage on quarantine release to reduce risk

Endpoint Detection and Response #

Prevention, detection and response capabilities at the endpoint.

Remote assist in roll out of agent and associated troubleshooting
Management of security policies including enabling blocking mode
Detection, mitigation and quarantining of malware and behavioral detections.
Collect detailed telemetry used in alert triage and incident investigations:
- ex. network connections, registry modifications, file creation and modification, DNS requests, processes, etc
Ability to network quarantine devices, when necessary
Remote command line access for containment and additional triage

Phishing Simulation and Training #

Harden your weakest link, your employees. Service is designed to be practical so users actually learn and don’t treat it as another compliance exercise.

Roles and Responsibilities

Mon, 01 Jan 0001 00:00:00 +0000

Where SolCyber Helps #

Detect and respond to threats against the traditional IT infrastructure
Visibility into security posture and continuous advice on how to improve your overtime
Ensure all the bundled tools are working optimally and constantly adjusted based off threats
Evaluate the performance of all tools regularly and update as needed based off changes in technology and threats
Answer questions and provide advice around security best practices
Support compliance efforts with included controls and communicate to auditors where needed

Where to Focus Your Resources #

Own security strategy and augment SolCyber’s capabilities
Coordinate response with our analysts when needed
Security architecture such as zero trust implementation
Personalized security:
Application security / Devsecops
Anti fraud
Supply chain risk
Insider risk
Compliance and other regulations

Onboarding Guide

Mon, 01 Jan 0001 00:00:00 +0000

Intro#

This document serves as a high-level guide to help customers understand the SolCyber onboarding process.

Objectives#

Transition security operations to SolCyber.
Get to know your team.
Establish roles and responsibilities.
Understand the process and timelines.

Key Stakeholders#

Role	Customer/SolCyber	Main Responsibility
Customer Success	SolCyber	Ensure success of onboarding and point of contact for all non-security related queries
Lead Analyst	SolCyber	Primary security contact
Project Lead	Customer	Lead contact for on-boarding to help coordinate between the different parties
Security Lead	Customer	Lead contact to work with the SolCyber SOC
Email Admin	Customer	Assist with deployment of Advanced Email Protection
IT Desktop Admin	Customer	Assist with deployment of Endpoint Persistence Agent
Network Admin	Customer	Assist with deployment of Lateral Movement Detection node

Key Milestones and Timeline#

Supported Products and Platforms

Mon, 01 Jan 0001 00:00:00 +0000

In general, the SolCyber foundational technology stack supports the following:

Operating Systems

Windows 10/11
Windows Server 2012/2016/2019
MacOS Catalina/Big Sur/Monterey
Linux (most distros)
Limited Support for Windows 7/8

Email Platforms

Microsoft Exchange/Office 365
Google Workspace

Data Ingestion#

SolCyber SOC Platform supports the ingestion of telemetry data from the following platforms. Please work with your Customer Success representative to onboard additional sources or contact sales to purchase additional EPS buckets.

Recommended Logs

Mon, 01 Jan 0001 00:00:00 +0000

Securonix is a powerful platform that enables our analysts to detect and triage incidents. It can collect data from a host of technologies to enable our SOC to:

Provide additional context for a primary indicator
Enable unique detection of threats

We’re solely focused on providing better security so we recommend only sending us logs that provide high security value. If you have logs that you want to setup specific alerts for, that works as well. Here’s what we recommend sending over and why.