Security Operations Center Analyst
CurrentPerformed Intrusion Detection using ALIENVAULT USM appliance which is an advanced threat Intelligence and have SIEM capabilities.Trend Micro Deep Security was used as EDR for all the DC and DR servers. It has 8 modules which include Anti-Malware, Web Reputation, Device Control, Application Control, Integrity Monitoring, Log Inspection, Firewall and Intrusion Prevention.Trend Micro Apex One was used as an EDR for Computers. Also behavioral analysis, application control were done to safeguard endpoints from malware and other attacks.Used CISCO FMC for signature based detection, anomaly detection and block other malware activities