Main Objective of the Service

The main objective of the service is to identify cyberattacks before they occur, assess threats relevant to the organisation, and develop practical recommendations for reducing their potential impact.

Monitored Sources

As part of the service, cyber risks and threat indicators related to the organisation are continuously monitored across various open and restricted information sources.

Information Identified During Monitoring and Analysis

• Malicious IP addresses and domain names
• Phishing and fraudulent web resources
• Malicious files and software
• Fraudulent pages using the organisation’s name
• Leaked usernames, passwords, and other confidential information
• Unauthorised disclosure of the organisation’s domains and email addresses
• Threat actor groups and their activities
• New vulnerabilities and methods used to exploit them
• Tools and techniques used in cyberattacks
• Potential attack plans and threat indicators targeting the organisation

Cyber Threat Analysis Process

Generated Indicators of Compromise

As a result of the analysis, technical indicators of compromise are generated for use in information security tools.

Use in Security Tools

The generated indicators can be used in the organisation’s existing information security tools to detect, block, and investigate malicious activity.

Information Provided Upon Completion of the Service

Upon completion of the service, the organisation receives detailed information about the identified threats, their sources, severity levels, and potential consequences.

Practical recommendations are also developed for blocking malicious resources, eliminating vulnerabilities, protecting user accounts, and preventing future cyberattacks.

Key Service Outcomes