One critical aspect of a SOC is attempting to find out if a given threat actor is either 1) associated with a group of attackers, 2) the threat actor may potentially be a current or past employee, 3) the alerts you are receiving are part of a larger picture within the hacker underground. While this information is very important, OSINT details can also help you provide meaningful insight into your employees and, how your company assets (e-mails, social media, etc.) are being utilized.
Monitoring accounts or, problematic accounts which may be receiving consistent phishing, malware or other attempts for illegal access are crucial. Without proper insights into how the events or incidents are happening you won't know what procedures you need to enforce, tighten or train your employees on.
Providing in-depth OSINT searches for your brand, employees and any PII which may be abused to target your organization you can gain meaningful insight into what you're up against and how this information can be abused / leveraged to impact your overall security. Combine these efforts with additional services that are provided, you can gain a better understanding of your organization, the data or information that may have been exposed how this can be used during internal training and how to further protect your organization from future attempts.
-
OSINT Methodology
Emploring the same tools, techniques and searches that attackers utilize to scale your online presence we will do the same. Cross referencing breach databases, the dark web and other data points. We will also attempt to help isolate company e-mail and contact pages that employees may be abusing for personal non-work-related events and accounts to help you tighten security where it can impact you most.
-
Reporting & Correlation
While most CTI and OSINT searches will return the results of what was found, Network Defense Solutions, Inc. goes a step further. From the reports you receive and, combined with white-box information you will learn how and where attackers may leverage the innocuous information that is found online. From these reports you will see how attackers can build a profile and attempt to exploit the weakest link within your security chain. Gathering this type of insight can help you provide more meaningful training and, adherence to policy. In addition to which, we will assist with providing meaningful threat hunts to help detect instances of exposure before they become a problem.
-
Reporting & Policy
After the reporting process generates insightful information, we will help you navigate any changes to your policies to tighten security or apply restrictions wherever and wherever possible. Whether this be through AUP, legal or other documents to help keep your environment safe. We will assist with policy and document review and suggest where tightening can take place while also cataloging the information discovered for historical to see how well changes are being made across the organization.
-
Internal Training & Education
All efforts and, tightening security are a step in a good direction, without training no policies will be adhered to. With our expertise in training and education we can assist with developing and delivering training to your end-users both video based and, on-site*. With meaningful documentation and media / on-site based training, helping your employees reach their goals towards security has never been easier!
If you would like to learn more about our OSINT services, drop us a line to find out more!
