What we do.
- Agree which systems and logs to monitor, how events are investigated, and when your team is alerted.
- Scope log management and analysis, including which sources feed your security event management platform (SIEM).
- Discuss endpoint detection and response (EDR) and managed detection and response (MDR), including who investigates and who can contain threats.
- Scope automated response workflows (SOAR) or an audit of an existing SOC when you need to evaluate its coverage and processes.