Managed Security Services

Security Information and Event Management (SIEM)

Managed SIEM services from Lunavi follow a digital forensics and incident response (DFIR) hierarchy of needs methodology. Features include the management of audit log collection and audit agents, monitoring and response for IT security risks, incident response, and threat intelligence.

We create processes and technical controls throughout your entire IT environment based on the following areas:

• Inventory: What are your IT assets?
• Telemetry: Is there visibility across assets?
• Detection: Can we identify unauthorized events?
• Triage: How do we classify detection results?
• Threats: Who are the adversaries? What are their capabilities?
• Behaviors: Is there any anomalous user or system behavior?
• Cyber-Hunt: Where are the adversaries that are already embedded in the information system?
• Tracking: Once intrusions have been detected, where do adversaries go within the system and what do they do?
• Action: What countermeasures can be used to evict identified adversaries and restore the information system to a known good state?
• Extrapolation of threat data: How can we learn from a compromise to better defend other clients?

‍

Endpoint Protection

Endpoint protection guards your workloads where they live: on servers, workstations, and end user devices. We'll help you enable defense-in-depth security controls at the host level, including an array of anti-malware and anti-virus tools, firewalls, and detection and response tools.

Components of Lunavi's managed endpoint protection services include:

• Anti-malware
• Host-based intrusion detection and prevention (HIPS)
• Host-based firewall
• Ransomware prevention
• Hard disk encryption
• Endpoint detection and response
• Operations and management of endpoint protection agents
• Monitoring and response to events
• Incident response services

As a whole, these solutions can detect new and unknown malware as well as index against known threats, prevent ransomware by stopping and rolling back attempted malicious encryption, and deny common exploit techniques.

Built-in web security features help you block unwanted websites and malicious traffic while enforcing company policy. Endpoint protection can be applied across most devices and operating systems.

Vulnerability Assessment

Lunavi managed vulnerability scanning services are designed to identify known software flaws in implemented software and operating systems, such as missing patches or misconfigurations. This data is then categorized and reported with month over month trends to determine the overall efficacy of the vulnerability management program.

Armed with regular reporting on vulnerabilities across your entire IT environment, you are better able to patch, update, or modify endpoints, servers, and services to remediate any security holes.

‍