SOC
Traditional preventive measures, such as firewalls, antivirus, email filtering or intruder detection systems, are no longer sufficient to keep the digital infrastructure and data safe these days. A continuous process of monitoring and analyzing behavior on the digital infrastructure and acting in case of anomalies are therefore necessary additional measures to be sufficiently resilient to current digital threats. This process is also known as Monitoring & Response (M&R).
Security Operations Center
SoC solutions can be quite complex from a technical point of view. For that reason, Deltics provides the most important building blocks with which we can create a total solution for every organization. These building blocks include SIEM, UEBA, NDR, EDR, and SOAR and also appear in Gartner's Security Operations Center (SOC) Visibility Triad. Each building block has its own function. By offering this in a modular way, it will be possible to build at an appropriate speed, both process-wise and at the resilience level.
Based on these building blocks, Deltics has two tracks developed; in fact, these are growth routes or “Security Journeys” that an organization can go through.
We distinguished the UEBA track and the XDR track
The UEBA track focuses on UEBA and uses this technique at the core of Security Operations. We use Exabeam's solution here and it can be used in any ICT facility. This track is always recommended in the case of a (large) on-premise environment or where the interests to be protected are very high. Even when the “malicious employee” use case needs to be executed, the UEBA track is the right solution.
The XDR track focuses on SentinelOne's XDR platform. We recommend this track for smaller organizations with more limited budgets or organizations that have virtually no on-premise environment. Because SentinelOne's XDR platform also has a Data Lake and SOAR integrations, it can therefore be said that XDR is a semi-total solution from the outset, so this track immediately provides a lot of added value for this organization.
If you do not want to carry out the security operations yourself, you can take out the associated Deltics SOC services on top of a track. We therefore call this service SOC-UEBA or SOC-XDR. For each service, we have three forms of package, namely Essential, Advanced and Premium. In addition, depending on the package form, it is possible to purchase add-ons. Specifically for the UEBA track, another entry-level model has been put together; the so-called SOC-SIEM service.
Take contact contact us for more information!
