Incident Detection & Response
Detect, investigate and effectively defend against cyber threats and security incidents.
Are you looking for an effective cyber security incident response service? avodaq’s Incident Detection & Response (IDR) service puts you in the best possible position. Our security team classifies, analyses and evaluates any anomalies that occur across your entire infrastructure.
All information is collected on a centralised Extended Detection & Response (XDR) platform and the results are made available in the form of case-related recommendations for action. We support you with structured escalation and communication management in responding to and resolving security incidents and implementing the necessary changes. In this way, our analysts ensure the continuous improvement of your systems.
Service
Our Full Service Package for you!
Analysis team
24/7 service
Fast onboarding
Infrastructure integration
Automation
Workflow development
Incident management
Communication management
Basis
The Architecture of the IDR service
Your existing security infrastructure is connected to the central XDR platform via defined, secure interfaces. This enables our analysts to start work immediately when events arise and to analyse the correlation of events across different systems. Our IDR service is now in use for you 24/7.
Our platform offers:
- standardised initial configuration
- customisable reporting & automation workflows
- automated information processing and communication
- vulnerability reporting and ticket generation based on products in use
Process
Our Common Approach
We work with you to create the perfect service for your security infrastructure. The baselining phase is an essential part of this, in which we analyse the current situation of your IT security environment, discuss customer-specific anomalies and evaluate and eliminate recurring false-positive events. We then take over regular operation and continuous monitoring.
- Order clarification: Agreement on the service description, process description
- Service Level Agreement: Agreement on the service to be taken over
- Onboarding: Evaluation of the security layer, connection of components, establishment of workflows and communication platforms, initialisation of processes
- Baselining: Test operation, investigation of the actual environment, vulnerability management, baselining of customer-specific security anomalies, reduction of false-positive events
- Regular operation: assumption of operational responsibility, independent IDR operation of the contractor