Cipher xMDR Service: Full visibility of the adversary

Cipher xMDR, focuses on early detection and response to threats. We provide our service through our xMDR platform, a proprietary technology platform 100% in the cloud that, through Artificial Intelligence, allows us to make incident detection and response operations more efficient and effective, as well as to improve the effectiveness of the activities of this service.

The xMDR platform is used by all our expert analysts in the operation and delivery of detection and response services, allowing synergies to be generated, best practices to be shared and knowledge to be enriched to achieve real anticipation of incidents.

The service analysts will work remotely 24x7, providing global coverage based on the customer's geography. The service is customizable through the assignment of a nominated Customer Success Manager (CSM) in charge of interacting with the Customer locally to monitor and adapt the service.

Our operation is complemented by a perfect mix of different frameworks such as D3FEND for alert standardization, MITRE ATT&CK for incident categorization and NIST for the fundamental framework in the operation.

One of the pillars on which the Cipher xMDR service focuses is the proactive detection of threats on a continuous basis using automated threat hunting techniques, providing the appropriate response to block such threats before they become security incidents.

The xMDR platform allows us to manage more efficiently all the alerts generated by the detection sources of the Customer, reviewing them in a comprehensive manner and generating enriched investigations provided with the appropriate context, which greatly facilitates the analysts' investigation tasks and therefore reduces response time.

Finally, the Customer will have full visibility and transparency into service activity through our centralized intelligent portal.

Benefits

• Threats: Facilitates the constant protection of our customers in the dynamic cybersecurity environment. Thanks to behavioral analysis and threat intelligence, we can adapt and respond quickly and proactively to threats, ensuring maximum security of digital assets.
• Cost: Cipher xMDR service addresses the problem of high costs by providing a scalable and flexible subscription model, allowing companies to pay only for the level of protection they need, thus optimizing their cybersecurity spending.
• Talent: With our Cipher xMDR service, clients can say goodbye to talent shortage issues. We provide a scalable and cost-effective option to effectively manage our talent, thanks to our automated platform, knowledge sharing and implementation of best practices. This translates directly into optimization of resources and time.

Description

• From adversary to operations: The first step is the generation of a model of the digital adversary, based on the analysis of the main trends in TTPs, their linked actors, modus operandi and IOC's according to the MITRE ATT&CK map. This will allow us to know their interests, sponsors, active campaigns, techniques and tools used in order to apply the rules and hyperqueries necessary to detect and combat the digital adversary.
• Incessant and reactive research: Cipher xMDR service focuses on in-depth investigations carried out by means of the xMDR platform, which has Artificial Intelligence engines that will help make the analysts' tasks much more efficient. To generate that information, we focus on predicting the threat's next move and taking preventive measures. Finally, the service's investigations will be automatically reviewed by the platform, which will identify recommendations on actions to be undertaken and displayed to analysts.
• Robotized and Assisted technology:Our specialists interact with the platform where the brain and the advanced incident detection engine are located. This technology allows us to robotize any type of action always with the supervision and decision of an expert.
• Continuous Threat hunting:The xMDR service can generate reactive detection rules and proactive rules. We have implemented advanced rules that enable protection against threats (hidden and known), so that we can launch threat hunting hyperqueries consisting of the detection rules identified because of digital adversary profiling from Customer.
• Centralized intelligent portal:All features will pivot on an adaptive, centralized and intelligent portal that the Customer can query at any time.

https://www.wetransact.io/