Enhancing threat detection efficiency, the distribution of indicators of compromise (IoC) and threat hunting and threat intelligence activities through automation as well as through the promotion and use of AI-powered innovative technologies.
Creating new correlation rules from multiple sources (threat intelligence, purple teaming, incident response, threat hunting) and other internal searches.
Validating and distributing the indicators of compromise (IoC) through threat sharing platforms (e.g. MISP).
Implementing and managing automation systems which can improve the quality of analysts’ work as well as reducing manual intervention through the SOAR platform and AI-powered technologies.
Continuous system enhancement by inputting new sources and with the contribution of our very own Security Operation Centre.