Proactive services

Ready for whatever comes your way

Pro active service

Wondering whether your organization is suitably prepared for an incident? If so, you’re on the right path simply by being aware of the very real danger of an incident. At Invictus, we preach a proactive approach to cybersecurity. Based on our vast experience, we’ve developed a set of proactive services that will prepare you for any incident.

Assesments

We strongly believe that through assessments you will get a 'true' picture on where you stand. Our assessments are data-driven and lead to objective insights.

Cloud IR readiness assessment

One of the best ways to determine your organization’s state of readiness is to measure the maturity of your cybersecurity incident response capability in the cloud addressing:

  • People, processes, technology, and information
  • Preparedness, response, and follow-up activities

The results provide an independent evaluation of your capabilities and advice on how to improve your situation.

Cloud compromise assessment

Traditional compromise assessments search for signs of ongoing attacks or traces of malicious activity in your environment. This approach doesn't work in cloud environments, first you need to identify what services are running and what logging is available. Using that information we search for traces of (ongoing) attacks.

Through long experience of responding to cloud incidents, we have a deep understanding of cloud attack techniques, threat actors and the traces they leave. We can therefore tailor our approach to compromise assessments and offer timely tangible results in the following categories:

  • Microsoft Azure & Microsoft 365
  • Google Cloud & Google Workspace
  • Amazon Web Services (AWS)

Consulting services

Do you have other cloud incident response related activities that you want to engage us for, look no further and reach out!

To give you an idea here are some consulting engagements we've done in the past:

  • Development of cloud incident response plans
  • Review of existing incident response procedures with the goal to improve quality, consistency and efficiency of the in-house incident response team
  • Review of Microsoft Sentinel setup and reviewing and writing custom detections in KQL
  • Perform a post incident review to objectively assess whether the correct incident response steps were followed and if there were areas for further investigation.