CRITICAL INFRASTRUCTURE SOC Monitored organizations internal data Backbone logs & events External intelligence Inventory data Info sharing & collaboration SOC findings & reports CTI & intelligence fusion Situational awareness Built-in analytics Threat hunting Threat investigation Self-developed analytics DATA LAKE HIGHLIGHTS IMPLEMENTATION BUILDING BLOCKS Huntics is a cyber security threat hunting and analytics platform which enables the discovery and investigation of advanced and unknown threats. The key highlights of Huntics include: Huntics can be implemented as part of an advanced SOC, in addition to conventional security controls, providing advanced threat discovery capabilities for: Huntics is a scalable on-prem solution that ingests petabytes of raw data from network and endpoint sensors into a data lake, allowing advanced analytics and investigation. BUILT-IN DOMAIN EXPERTISE - Transforming unique knowledge of subject matter experts into 150+ military-grade MITRE analytics for identifying suspicious patterns along the attack life cycle. Huntics utilizes machine learning for behavior-based threat discovery and allows users to fine- tune built-in analytics according to their threat landscape. THREAT LANDSCAPE ADAPTATION - Providing an Integrated Development Environment (IDE) for users to develop analytics and advanced correlations, based on their threat landscape and scenarios, using data science techniques. INTEGRATED CYBER THREAT INTELLIGENCE (CTI) - Allowing users to prioritize threat hunting activities based on targeted intelligence collected from the deep and dark web. WIDE & DEEP VISIBILITY - Ingesting hundreds of thousands of events per second from multiple networks/organizations, using built-in or 3rd party sensors. Huntics includes a scalable data lake infrastructure which allows long retention for manual, automated, and retroactive analysis. SMART INVESTIGATION - Continuously profiling billions of cyber entities, as well as extracting, visualizing & auto-scoring leads, using AI-based investigation sequences. HANDS-ON EXPERT SERVICES - Offering professional services, including analytics development, threat hunting and training to enhance system performance and bridge knowledge gaps. NATIONAL / GOVERNMENTAL SOC MILITARY SOC