Incident Response Enablement Services

Preparing Your Incident Response & SOC Personnel

Our team of IR specialists can ensure that your incident responders, threat hunters and other SOC personnel have exposure to real-world threats. We will equip them with the required capabilities to identify and effectively respond to incidents.

IR Enablement Services

Members of our DFIR team work closely with your SOC and information security personnel to gather pertinent details about your organization prior to embedding ourselves with your team.

While collaborating with your team, we’ll leverage our IR, threat hunting, and forensics expertise across a variety of investigations and engagements to:

Share specific details about recent response efforts
Perform knowledge transfer
Provide recommendations on investigative processes, IR methodology, and analysis techniques

The end result is more capable SOC personnel and an engagement summary with key observations and proposed recommendations for increased proficiency.

Talk to an Expert

Blue & Purple Team Exercises

During our blue team exercises, we’ll work closely with your various SOC teams in order to increase identification, incident response and readiness capabilities. These exercises are commonly performed in combination with a penetration test or red team exercise as a purple team engagement. The combined effort and communications with both teams will allow us to:

Assess visibility
Confirm and correct identification capabilities
Enable SOC staff
Identify opportunities for increased proficiencies

As part of this exercise, IR specialists will work collaboratively with your team to:

Prepare

Collect relevant documentation and information to understand your architecture, policies and procedures
Coordinate discussions with staff to validate existing solutions and visibility available to your resources

Facilitate

Participate in open sessions with security operations and incident response staff
Provide recommendations and incident insights into investigative techniques
Assist with confirmation of relevant detection and prevention outcomes to ensure coverage and progress