PCSOC – Public Cloud SOC

Cloud security platforms generate enormous amount of data, manual detection only is like finding a needle in haystack

Collecting data and using rules for known malicious activity is not enough. The amount of data naturally generated by cloud activity that needs to be analyzed is enormous. The challenge of searching for unknown malicious activities is even greater.

Our system uses Machine Learning that constantly processes data, learns identity behaviors, and detects anomalous activity. This detection is then correlated with other detection mechanisms and IOCs and is eventually investigated by a PCSOC analyst.

An automated runbook response can be triggered to an incident. It is also possible to activate the automated playbook only after the SOC analyst has verified the incident.

One of the greatest challenges and concerns in regards to cloud security is Visibility; the ability to really understand and control what happens inside your cloud environment from a bird's-eye view, and then to be able to drill down, focus and investigate at the event-context level.

We provide (near) real-time security insights and overview of critical controls.

We can also create security-oriented process or service-specific customized views.

Our cloud security center of excellence will assist you in making the right decisions. During the lifecycle of your activity in the cloud, you will face security-related challenges.

Some of them you can solve with the click of a button. Some might have a broad impact on costs, architecture or performance and require understanding and experience in implementing security configuration in public cloud. Our experts will guide you through those challenges until an optimal solution has been reached.

A 24/7 maned soc team with cloud specific knowledge analysts watching your cloud activity to detect any malicious activity.

Monitoring cloud activity is essential for detecting malicious activity, automated processes, third-party vendors, service providers, organizational users, and anyone who has access to operate on an outgoing basis in your cloud environment. Monitoring api calls of management stack is the only way to detect and identify security events, which will then be analyzed by a specialized SOC Analyst to determine whether additional measures shall be taken. Our Public Cloud Security Operation Center is active 24/7.

Once you have signed a contract with your public cloud provider, you have agreed to take responsibility for the security of anything you build, create and configure on the cloud platform.

The dynamic nature of public cloud environments with their frequent changes, makes it difficult to track risks. A wide range of user and service-providers' access, multiple cloud accounts' management and knowledge gaps in cloud security make it even more challenging to prevent misconfigurations that might lead to exposure or breach. For that reason, we continually scan for configuration changes in order to detect Security Misconfigurations based on our rich and constantly evolving contextual rule-set. As part of our onboarding, we will work together to remediate any HIGH severity findings detected by our system, and define a security baseline policy, which will be monitored on a continuous basis.

During the service lifecycle, we will adapt the policy to suit your needs.