Cyber threat intelligence

Continuous bespoke, focused research which augments our subscription services:

• Dark web forum monitoring - ongoing keyword based monitoring of a wide variety of dark web and closed cyber crime forums for discussion of, or indications of targeting your sector and organisation.
  
• Credential leakage monitoring - keyword based searches of credential dumps obtained from open source paste sites, data dumps, botnet command and control servers etc., so that action can be taken to prevent usage against your organisation.
  
• Domain monitoring - keyword monitoring for new domains infringing your brand, new subdomains from unrelated domains, and a wide variety of typosquatting and other permutations.
  
• Open source and social media monitoring - we monitor public forums, mainstream media and social content for negative news or sentiment and discussion of your brand to identify potential issues, escalating high priority findings to you.
  
• Corporate digital estate monitoring - continuous discovery and monitoring of corporate sites to understand and minimise external attack surface. This includes reports on specific vulnerabilities, defacement monitoring and rogue site content.

• Bespoke research – reporting on threat actors, campaigns, malware or malicious indicators of interest.
• Ad hoc analysis – e.g. malware and spear phishing email analysis, including IDS and host based signature development.
• Analysis support – when required, we can provide second and third line intelligence support to assist with complex triage and incident response investigations.
  

Services which enhance your ability to consume, apply or produce intelligence:

• Maturity assessment - analysis of current threat intelligence capability, measured against best practice and standards.
• Threat intelligence programme development – our team has years of experience in developing intelligence capabilities. We offer services which can assist you in the creation or enhancement of your own threat intelligence capability, by combining our technical expertise with practical and actionable business strategy.
• Threat modelling – mapping relevant threat actor intent and capability to IT environments.