Managed Sentinel SIEM Service

Managed Azure Sentinel SIEM service is designed to increase the organization’s visibility into its security posture and to better respond to cybersecurity incidents. Our managed service includes:

• Deployment and configuration of Azure Sentinel SIEM in customer Azure subscription and activation of the Office 365 Data Connector. Our team will assist customer to enable auditing in Office 365
• Configuration of more than 25 alert rules related to Office 365 data source for monitoring activities to Sharepoint Online, Exchange Online and OneDrive
• Configure a custom API function to extract events related to Teams and DLP Security Monitoring workloads and publish it into Azure Sentinel Log Analytics. Additional alert rules will be configured for these events.
• The most valuable component of a managed SIEM service consists in the continuous alerts and playbooks tune-up to stay aligned with the current threat landscape.
• Our proprietary machine learning algorithm and dark web discovery are leveraged to enrich the collected data and expedite cybersecurity investigations with Threat Intelligence.
• Managed Sentinel team meets the customer regularly to review and collect feedback and new requirements on alerts, playbooks and workbooks.