- Digital Forensics: Remote and direct drive review via Encase to determine potential compromise, effects of compromise, cause of compromise, potential data loss, and recommendation to reduce future compromise.- Network Forensics: Daily analysis of logs from content filtering system, Firewall, syslog and DNS logs. When events are found via IDS/IPS systems, AV alerts and/or internet information assurance sites, log analysis provides details to potential compromises- IDS/IPS Review:… Show more - Digital Forensics: Remote and direct drive review via Encase to determine potential compromise, effects of compromise, cause of compromise, potential data loss, and recommendation to reduce future compromise.- Network Forensics: Daily analysis of logs from content filtering system, Firewall, syslog and DNS logs. When events are found via IDS/IPS systems, AV alerts and/or internet information assurance sites, log analysis provides details to potential compromises- IDS/IPS Review: Monitoring of IDS/IPS systems for alerts showing potential system compromises. The information is correlated to other traffic to confirm compromises- Anti-Virus alerts: Investigation of alerts received from anti-virus and host intrusion prevention system. Alerts are reviewed for correlating data in IDS/IPS alerts and/or log correlated to determine validity of alerts- Incident Response: Identify and contain compromised systems, report and perform incident response in accordance with Standard Operating Procedures (SOP), implement changes to SOP as needed, correlate newly discovered malicious behavior to determine other potentially compromisedsystems- Staff Training: Train new staff. Conduct ongoing oversight of work product of all supervised staff, provide guidance and mentor staff Show less

-Complete remote digital forensics via Encase- Full hard drive forensics on confirmed cyber incidents- Utilize multiple IDS/IPS Solutions to monitor network. Complete investigations of any alerts- Complete searches thru log traffic for indications of compromise not seen in IDS/IPS alerts

Tier 1 help desk support, and account management for ~6000 users

On-site support for in-house developed software for collections department, and auto-dialer support