Customize your security workflows
Professional Services
Our professional services team is a group of seasoned cyber security engineers and architects available to assist you with the integration of our intelligence into a variety of standard to custom solutions, designed to support you wherever you are on your intelligence-led journey.
Support tailored to your unique security needs
Custom Integration Scoping
Meet with our professional services team to determine the intended use case and explore possible integration points.
Use Case Development and Implementation
The use case development service includes multiple workshops consisting of initial scoping & discovery, review of existing use cases, and identifying new use cases needed for intelligence-led security strategy.
Integration Configuration
Work with our professional services team to ensure your integration is implemented correctly and assist with integration setup with tool administrator. Integration configuration is included with Premium or Integration Support.
CTI Design and Roadmap
Improve your security program through intelligence integration at a procedural level. Through multiple workshops, our team will gain a deep understanding of your organizational operations and strategies to identify where intelligence integration increases the value and performance of your security program to better protect the business.
Integrations
Our Professional Services team can help you integrate intelligence into your security tools whether it’s a custom solution you’ve built or a 3rd party tool. Schedule time today to discuss how we can integrate our intelligence into your workflow. Examples of 3rd party tools that our team has successfully completed engagements, which require support and work on the side of clients:
Splunk
Leverage the power of intelligence to correlate against internal telemetry data to detect risky IOCs, triage alerts faster, and proactively block threats before they impact business.
LogRhythm
LogRhythm continuously correlates data collected from across the enterprise with actionable, real-time intelligence from Recorded Future for faster, confident threat detection and response.
Microsoft
Leverage the power of intelligence to correlate against internal telemetry data to detect risky IOCs, triage alerts faster, and proactively block threats before they impact business.
IBM Security
Provide real-time monitoring and correlation of the vast amount of security events and network traffic in your organization.
Elastic
Enable customers to stop advanced cyber threats with new prebuilt detections and data source integrations, and accelerate application development with deeper visibility into serverless architectures and continuous integration and continuous delivery (CI/CD) pipelines.
Graylog
Graylog is a leading centralized log management solution for capturing, storing, and enabling real-time analysis of terabytes of machine data.
McAfee
McAfee® Enterprise Security Manager (McAfee ESM) is a security information and event management (SIEM) solution that gives you real-time visibility to all activity on your systems, networks, databases, and applications.
OpenCTI
OpenCTI is a free, open-source threat intelligence platform based on the STIX2 data model. It provides a centralized point to collect, correlate, and export cyber threat intelligence
RSA Archer GRC
Archer Third Party Governance (GRC) enables analysts to automate and streamline oversight of vendor relationships, get an accurate picture of third-party risk factors, and prioritize them according to importance.
RSA Netwitness
RSA NetWitness Platform brings together evolved SIEM and threat defense solutions that deliver unsurpassed visibility, analytics, and automated response capabilities.
Slack
Use the simplicity of a chat command in Slack to get enriched details about a vulnerability.
TheHive
TheHive is a scalable, open source and free Security Incident Response Platform, tightly integrated with MISP (Malware Information Sharing Platform), designed to make life easier for SOCs, CSIRTs, CERTs and any information security practitioner
ThreatPinch
This highly adaptable Extension enables you to plug api queries directly into your browser via an on hover tooltip.
Customize your security workflows
Blocking IOCs found in Splunk
Add an IOC to a block list where it can be sent to your firewall for blocking to protect your organization faster, saving time and resources.
Correlation Dashboard in Microsoft Sentinel
Consolidate threat information into a single pane of glass to view summary data of risky IOCs in your environment and gain a deeper understanding of your security environment.
Threat Hunting Dashboard
Use threat hunting packages to hunt for indicators in your SIEM, network, or endpoint tools to correlate indicators against live and historical telemetry data.