'%20fill='%23fff'/%3e%3cpath%20id='Path_3'%20data-name='Path%203'%20d='M22.84,6.415H.713a.713.713,0,1,1,0-1.425H22.84a.713.713,0,1,1,0,1.425Z'%20transform='translate(0%201.141)'%20fill='%23fff'/%3e%3cpath%20id='Path_4'%20data-name='Path%204'%20d='M22.84,34.525H.713a.713.713,0,1,1,0-1.425H22.84a.713.713,0,1,1,0,1.425Z'%20transform='translate(0%207.568)'%20fill='%23fff'/%3e%3cpath%20id='Path_5'%20data-name='Path%205'%20d='M12.215,4.145h-4.2a.713.713,0,1,1,0-1.425h4.2a.713.713,0,1,1,0,1.425Z'%20transform='translate(1.669%200.622)'%20fill='%23fff'/%3e%3cpath%20id='Path_6'%20data-name='Path%206'%20d='M11.294,38.488H8.984a1.794,1.794,0,1,1,0-3.588h2.31a1.794,1.794,0,1,1,0,3.588Zm-2.31-2.15a.356.356,0,1,0,0,.713h2.31a.356.356,0,1,0,0-.713Z'%20transform='translate(1.644%207.979)'%20fill='%23fff'/%3e%3ccircle%20id='Ellipse_1'%20data-name='Ellipse%201'%20cx='1.72'%20cy='1.72'%20r='1.72'%20transform='translate(26.109%2021.624)'%20fill='%23fff'/%3e%3ccircle%20id='Ellipse_2'%20data-name='Ellipse%202'%20cx='1.72'%20cy='1.72'%20r='1.72'%20transform='translate(31.453%2021.624)'%20fill='%23fff'/%3e%3ccircle%20id='Ellipse_3'%20data-name='Ellipse%203'%20cx='1.72'%20cy='1.72'%20r='1.72'%20transform='translate(36.798%2021.624)'%20fill='%23fff'/%3e%3c/svg%3e)
ONBOARDING
Hackers won't wait for you to slowly integrate a new vendor. That's why we start protecting your systems within hours, and make the whole experience simple. Learn more below about our typical onboarding process.
Schedule ConsultationHackers won't wait for you to slowly integrate a new vendor. That's why we start protecting your systems within hours, and make the whole experience simple. Learn more below about our typical onboarding process.
EMAIL SECURITY:
Time to fully deploy: 3–5 BUSINESS DAYS
Integrate with Google Workspace or O365 to begin scanning and monitoring malicious emails. All we need is app authorization between the customer email provider and email security tool to get started.
Full scanning of email history to establish baselines between trusted senders and strengthen user behavior detections.
NCO manually reviews all email alerting and finalizes tuning. Tools are switched to protect mode to actively block malicious emails.
We fully manage your email security tool, investigating and remediating any threats, phishing reports, and restore requests, enabling your team to focus elsewhere.
Deliverables:
- Phishing prevention
- Spam filter
- URL scanning and blocking
- User behavior anomaly alerting
- NCO investigations for reported phishing and restore requests
- Malware prevention
ENDPOINT SECURITY:
Time to fully deploy: 1–5 BUSINESS DAYS
EDR agents are deployed to test group to monitor performance
NCO team creates stunning exclusions to optimize all device performance while maximizing security coverage.
NCO team continues to deploy additional agents, tune any triggered alerts, and create additional exclusions as necessary.
We fully manage your endpoint security tool, investigating and remediating any threats, phishing reports, and restore requests, enabling your team to focus elsewhere.
Deliverables:
- Ransomware protection
- Antivirus replacement
- Log ingestion for investigations
- Remote shell capability for incident response
- Threat hunting through historic logs for advanced persistent threats (APTs)
SIEM:
Time to fully deploy: 1-2 WEEKS
Deployment of SIEM collector to pull logs from critical sources (Active Directory, Firewall, DNS, DHCP, LDAP, Cloud, etc)
Deployment of SIEM Agents to each workstation and server to monitor all activity on local machines for malicious processes or suspicious use behavior.
Continue to deploy SIEM agents and connect log sources to SIEM collectors while tuning Investigations.
Deploy additional SIEM tools including Intrusion Detection System (IDS), Honeypots, and SOAR capabilities.
We fully manage the SIEM, investigating and remediating threats, phishing reports, and restore requests, enabling your team to focus elsewhere.
Deliverables:
- Full visibility on network, cloud, and endpoints
- Intrusion Detection System (IDS)
- Security Orchestration and Automated Response (SOAR)
- User Entity Behavior Alerting (UEBA)
- Attacker Behavior Analytics (ABA)