Real Time Threat Monitoring (RTTM)

Managed Security Services

Take a proactive approach to threat monitoring

Collecting and analysing security logs is a critical component of a security strategy and should be made a mandatory practice. However, millions of individual log entries can be generated daily and the task of organizing this information can be overwhelming. Too often, the burden is placed on internal teams to monitor systems 24/7, which causes organizations to have gaps in their detection or not to monitor logs at all.

Without real time security monitoring, IT and security teams have no visibility of the current and proposed threats to their infrastructure and data assets. The Real-Time Threat Monitoring (RTTM) services from eHDF meets the toughest security requirements that organisations require.

Make security visible in real time

The eHDF platform is augmented with 120-aggregated security intelligence data feeds; both open source and subscription based that gives unparalleled visibility of cyber threat actors. The platform is also enhanced with 700 available use cases and provides the flexibility to create new use cases within 24 hours. We offer the following:

RTTM Advanced Agent License
RTTM Portal User License
Incident Remediation Service
Incident Response Service
Advanced Intelligence Service

Managed Security Services for 24/7 threat monitoring in Dubai Click here to watch video

eHDF's process includes:

Log Collection

eHDF collects logs from all relevant IT infrastructure sources. The log collection will be performed via SIEM system agents, and imported securely and is compressed at the indexers

Log Management

Includes lifecycle management of collected logs. Our guidelines on log managements were designed based on PCI-DSS recommendations. All logs collected are retained for a set period depending on the customer policies and practices. eHDF provides flexibility for customers to increase the retention period to meet their specific requirements at an additional cost

Log Analysis

eHDF analyses the collected data against pre-defined set of best practice use cases and specific use cases agreed with the customer

Incident Classification

In this manual process performed by eHDF’s Cyber Defense Centre team, each incident is validation and classified

Incident Notification

eHDF develops an incident notification process, taking into consideration the customers environment and notify the customer based on the incident classification of each incident

Incident Management and Detailed Report

eHDF manages the incident response process to a successful conclusion. This includes incident tracking, incident containment (advise) and incident remediation advise. eHDF also prepares a detailed report after the incident is concluded to ensure continuous improvement

RTTM Services in Dubai

Managed Security Services

Take a proactive approach to threat monitoring

Managed Security Services for 24/7 threat monitoring in Dubai Click here to watch video