RocketCyber

Additional features

Endpoint Monitoring

Monitors Windows, macOS, and Linux event logs for security incidents.

Breach Detection

Identifies malicious tactics, techniques, and procedures (TTPs) used by attackers to detect and prevent breaches.

Malicious Files and Processes Detection

Identifies and alerts on the presence and activity of malicious files and processes on endpoints.

Threat Hunting

Proactive searching for hidden and emerging threats within the network.

Intrusion Detection

Detects suspicious network activity that indicates an unauthorized intrusion.

3rd Party NGAV Integrations

Integrates with Next-Generation Antivirus (NGAV) solutions from various vendors.

Network Log Monitoring

Monitors logs from firewalls and other edge devices for security events.

Threat Reputation Integration

Integrates network data with threat reputation, WHOIS, and DNS information for deeper analysis.

Cloud Security Monitoring (Microsoft 365/Azure AD)

Monitors security event logs, malicious logins, and Secure Score within Microsoft 365 and Azure Active Directory.

Automated Mitigation

Capability to automatically address and mitigate detected threats.

PSA Ticketing

Creates automated, actionable tickets in Professional Services Automation systems for identified threats, complete with remediation details.

User Monitoring (Microsoft 365)

Specifically monitors user activity within Microsoft 365 to detect suspicious behavior, such as malicious logins.

Rapid Response

The SOC team is quick to call and react to security events.

Comprehensive Reporting

Provides a single pane of glass for reviewing all client security data daily.

Simple Implementation

The deployment process is noted as easy and quick, taking only a few clicks.

Knowledgeable SOC Analysts

The SOC analysts are described as experts who provide clear answers and follow-up.