CYBER INTELLIGENCE
OPEN SOURCE DIGITAL NETWORK INTELLIGENCE (OS-DNI)
- Social Media
- “Google Hacking”
- Image EXIF Data
CONTINUOUS MONITORING
- Security Background
- Asset Tracking and Monitoring
- Target Tracking and Monitoring
ELECTRONIC INTELLIGENCE (ELINT)
- Cell-phone monitoring
- Radio/CB/walkie-talkie monitoring
- Other RF communications
HUMINT
- Spear-phishing
- Social Engineering
- Interrogations (subtle info extracting, not snatch and grab)
TRAINING
- How to do all of the above
- Creating Consistent Intel Reports
- Creating Actionable Intel Reports
- Reading Actionable Intel Reports
ATTACK
Please note that most of this will not be offered to the general public or foreign governments
PenTesting
- Physical
- Social
- Computer – Internet
- Computer – Close Access
- PCI Security Audit
- General web security
- Database Security
- Cross Site Scripting
Hacking
- Fuzzing
- Determining if a crash is exploitable
- 0-day generation
- Stage 1 installers
- Stage 2 installers
- Command and Control Networks
Specialized
- Cell Phone
- Wireless (802.11, Zigbee, and others)
- SCADA
Training
- Intelligent filtering part
2: You know that each end point device has a limited command set, and responds at a given data rate. Flag/report/log anything that deviates.
DEFENSE
Operations Centers (SPOC)
- Security Operations Center (SOC)
- Network Operations Center (NOC)
- Threat Operations Center (TOC)
- Mission Operations Center (MOC)
- Single Point Operations Center (SPOC)
Table Top Exercises
Red Force / Blue Force Exercises
Scenarios
Custom *OC Development
- Facility
- Tools
- Training
Managed Security Services Entire Defense Team
- Intelligent filtering part 2: You know that each end point device has a limited command set, and responds at a given data rate. Flag/report/log anything that deviates.
Specialized
- Custom Artificial Intelligence Solutions
- SCADA solutions
- Social Engineering
- Operational Security
- Situational Awareness
- Behavior Analysis
- Commercial
- Custom
HIGH ASSURANCE
This is often referred to with a number of names. Some of which means High Assurance, most of which are describing one aspect of High Assurance. The bottom line is that High Assurance is “provable security”
Terms
- Multi-Level Security (MLS)
- Mandatory Access Controls (MAC)
- Trusted Computing (TCS)
- Cross-Domain Solutions
- Data Diode
Standards
- Rainbow Series (A1 through D )
- Particularly the Orange Book 5200.28-STD “DoD Trusted Computer System Evaluation Criteria
- Common Criteria (The EAL levels 7 through 1)
Solutions
- Customized solutions for firewalls
- Customized solutions for SCADA
- Customized solutions for cellphones
FORENSICS
It is used to support all aspects of computer security in one manner or another.
Police Investigations
- Trafficking
- Gangs
- Terror Networks
- General crime
Attack
- Intel Gathering
- Planning support
Defence
- Incident Response
- Background Investigations
High Assurance
- Verification of Installation/Configuration
- Child
- Drug
- Weapons
TRAINING
Training is called out specifically here not because we have select courses, but because we don’t. We provide customized training based on unique customer needs, situation, and tools. You do not come to us because you want a Java certification, or Security+, or some SANS certification, or CISSP. You come to us because you need this one thing from Security+, these four things from these three SANS courses, and another thing that you have not seen anyone offering.
As an example: You don’t come to us to get a class in how to do Network monitoring with a SIEM. You come to us because you want a class on how to use the SIEM that YOU HAVE on the UNIQUE network that you have with the problems and issues that ONLY you have. We will create a customized course (or set of courses, depending on how many students, and how complex the topic(s)) This will include not only how to use the tool, but what it is telling you, and where to go next. How to write proper reports for a hand-off that someone else up the chain can read, understand, and act upon.