Banking

Level 3 expertise and support in CSIRT

We were integrated into the CSIRT team of a major player in the banking sector. The service involves the following:

• Managing level 3 incidents (vulnerabilities, APTs, viruses, etc.).
  Creating, testing, implementing and maintaining security incident detection rules;
• Creating and implementing incident management procedures;
• Coordinating level 2 SOC operations
  Carrying out digital investigations / Forensics;
• Hunting threats, analyzing weak signals and developing SIEM use cases;
• Taking part in the implementation and maintenance of the SIEM, and other security platforms managed by the team;
• Contributing to log collection and onboarding architecture projects.