Compromise Assessment

It takes organisations an average of 191 days to identify a data breach. Understanding when we are breached and resolving it should be the top priority. In an increasingly complex and dynamic threat landscape, now more than ever, organisations need to understand the effectiveness of their cyber defenses in proactively protecting, detecting, and responding to threats.

FIRMUS’ Compromise Assessment service is a tailored, objective technical review of your organization’s network to find instances of compromise, unauthorised access, and anomalous activity. Our compromise assessment service identifies evidence of malicious activity within your IT assets through the analysed data pulled from endpoints, network, and external threat sources, augmented by the expert technology of an industry-leading proprietary threat intelligence platform, to gain unique insight into signs of historic or active compromises in your environment and provide clear, pragmatic advice for remediation.

During the assessment, FIRMUS will identify the following items, but not limited to;

1. Any malware activities, ransomware activities, botnet packets, and etc.
2. Unknown active user account
3. Changes on host configuration / addition
4. Data exfiltration out of the network
5. Processes that runs on a certain period of time and stay dormant during peak hours
6. Many more…

By performing these assessments, the organisation can then further contain the network or host that is affected and perform a incident response management before the malicious activity spreads throughout the network.