Threat Intelligence

At the foundation of any cybersecurity, service is a threat intelligence feed that allows for up to the minute information about new and emerging dangers in the cyber environment.

At Datashield, we've built our own threat intelligence for internal use and as an operational tool for correlation against real events.

The real difference with MDR is the trained professionals who are on-site and equipped with the knowledge and tools actively defend and protect your organization's data.

Threat Hunting

SHIELDVision

Threat Hunting is the proactive or offensive side of Managed Detection and Response. We use our cutting-edge, proprietary, orchestration tool called SHIELDVision to leverage data from numerous sources around the globe.

SHIELDVision allows our talented analysts to "go back in time" and identify compromises missed by other tools. We can scrub legacy traffic against zero-day exploits and help close detection and remediation.

Learn More about SHIELDVision

Threat Detection

We utilize logs, full packet capture, and advanced intrusion detection technology to constantly monitor all traffic on your network-- not just the events that trigger an alert.

Our MDR service provides network and application log monitoring, alerting, and reporting in real-time so we can have a bird's eye view. We also work with global intelligence groups to actively hunt for active threats and malicious conspirators who may be targeting your company's industry or network.

Threat Validation

When we detect suspicious indicators, an MDR analyst investigates deeper to determine if a real threat or incident exists.

This process works in sync with SHIELDVision, manual intel analysis, automated real-time scanning/querying. With SHIELDVision, we can correlate against past packet data.

Threat Response

For a validated incident, all critical data is collected and delivered in comprehensive reports to provide you with a granular view of what is happening and how to approach remediation.

Datashield reconstructs the actions leading up to an event and advises you on mitigation strategies for any compromised assets as well as future prevention techniques.

Threat Intel, Content and Alerting

Within the context of our MDR service, we are always gathering intel, writing content, and managing alert volume to provide our customers with a smooth and efficient experience.

Read our latest Security Advisories