A Better SOC
We see our CyberSOC as a strategic and differentiated capability. We bring attacker perspective to our defensive controls operations by using our world class Red Team to sharpen and test detection rules, and provide training and perspective to our CyberSOC operators. Our approach integrates cutting-edge Purple Teams techniques to improve MITRE ATT&CK alignment and identify visibility gaps.
Our SOC Models
SRA offers two models of CyberSOC – XDR and Enterprise. Both include people-driven 24x7x365 security operations, but depending on your environment, needs, and budget, one choice may be a better fit for your organization.
XDR
SRA’s XDR is a turn-key CyberSOC solution which provides integrated SIEM, SOAR and Data Lake and integrates with your EDR of choice. Our XDR is based on a Microsoft Sentinel architecture which minimizes your log costs, prioritizes and validates MITRE ATT&CK alignment.
Enterprise
|
|
|
|
Our SOC Models
SRA XDR
| 24x7x365 Monitoring & Response: | ☑ |
| Threat Intel & Hunts: | ☑ |
| Purple Teams w/ VECTR: | ☑ |
| Content Engineering: | ☑ |
| Forensics: | Available |
| SIFTR OSINT Monitoring: | Available |
| SOAR: | ☑ |
| Data Lake with Storage Cost Optimization | ☑ |
Enterprise
| 24x7x365 Monitoring & Response: | ☑ |
| Threat Intel & Hunts: | ☑ |
| Purple Teams w/ VECTR: | ☑ |
| Content Engineering: | Available |
| Forensics: | Available |
| SIFTR OSINT Monitoring: | ☑ |
| SOAR: | Available |
| Data Lake with Storage Cost Optimization | Available |
Defense Metrics
| 24x7x365 Monitoring & Response: | – |
| Threat Intel & Hunts: | – |
| Purple Teams w/ VECTR: | ☑ |
| Content Engineering: | – |
| Forensics: | Available |
| SIFTR OSINT Monitoring: | – |
| SOAR: | – |
| Data Lake with Storage Cost Optimization | – |
Click Here for XDR CyberSOC
We monitor SIEM alerts using Azure Sentinel and your cloud, responding to EDR, Email, and domain alerts.
Click Here for Enterprise CyberSOC
Our full SOC model including SIEM, Endpoint your other tools and ticketing in your platform.
Click Here to Learn About Tier 4 Purple Teams
Prioritize MITRE ATT&CK tactics & techniques and Adversary Simulations for your industry.
Subscribe to our Daily Threat Intelligence Bulletin
Our Threat Intelligence Gathering & Reporting (TIGR) team curates a daily brief, the TIGR Threat Watch, with information collected from several industry intel sources. Threat Bulletins include details on the CVE and recommendations for mitigation and remediation. The TIGR Threat Watch is accessible in real time via RSS. You will also receive critical vulnerability notifications as information develops.