Our System

Organization monitoring service against cyber threats

Advanced Cybersecurity Solutions Tailored to Your Needs

The company Secterious (Eitan Freimovich and Rony Atias) and the company ShvoIT (Moshe Shvo) used their extensive experience as CISOs and penetration testers for a wide range of organizations to develop a managed and innovative SIEM SOC service. This service, designed specifically for small and medium-sized businesses, is based on strong open source technologies and is tailored to meet the unique security needs of each customer.

Our team, which boasts over 20 years of experience in cyber security and digital investigations, is made up of leading experts trained in leading cyber security companies and the IDF's elite cyber units. We operate according to a customized methodology, which provides a response not only to the immediate needs of your organization but also prepares him to proactively deal with future threats.

MITRE ATT&CK
A Tactical Approach to Cyber Defense

The MITRE ATT&CK Matrix is a modular infrastructure that presents a wide set of attacking techniques used to achieve pre–defined objectives.

The tactics are classified by objectives in a matrix, which shows the process of an attack from the starting point to the final effect.

The extended version of MITRE ATT&CK for Enterprise addresses many environments, including Windows, macOS, Linux, PRE, Azure AD, Office 365, Google Workspace, SaaS, IaaS, Network, and Containers. The various tactics in which the attacks listed in MITRE ATT&CK can be used can be spear phishing, command and control, and credential dumping.

Reconnaissance

Gathering information about the target for planning future operations

Resource Development

Establishment of resources to support operations, which includes the establishment of a command and control infrastructure

Initial access

An attempt to enter the network, such as phishing

About the DREM SOC solution

An advanced and unified enterprise SIEM monitoring platform provides a comprehensive solution for persistent cyber threats and end-to-end hardening of enterprise systems.

The system is suitable for local, cloud and hybrid environments and guarantees comprehensive protection in the field of information security.

Especially in light of the transition to a routine of war, these areas are being re-invigorated due to the new challenges that include new attacks, vulnerabilities and weaknesses that are published daily.

This is a critical component that allows the organization to continue to function in a continuous business manner, when the SIEM platform supports a SOC system that operates 24/7 by the talented analysts working in a FLAT TIER configuration (also know how to identify and operate) even in emergency situations.