product
- Macnica SOC Service
- CrowdStrike Monitoring Operation Support Service
- SIEM Operation Monitoring Service [Original App/Service]
- Active Directory Diagnostic/Monitoring Service
- Trellix EDR Monitoring Service
- Threat Hunting & Incident Response Service
- Triage service
- security assessment
- security advisory
- CSIRT construction support
- CSIRT enhancement exercise
- Suspicious email training service
- platform diagnostics
- Website security monitoring service
- Web application vulnerability diagnosis

Macnica Security Service
Macnica Security Services
Our security and operation specialists will take care of alert monitoring, analysis and reporting for Trellix EDR in your environment. While this service supplements the security knowledge that is necessary for operating EDR products, but tends to be lacking within companies, it is possible to greatly reduce the daily operational burden on customers.
* Trellix EDR supports customers' threat analysis with its guided investigation function in addition to high defense/detection power in cooperation with Trellix Endpoint Security (ENS), the company's EPP product.
Please refer to the following URL for product details.
https://www.macnica.co.jp/business/security/manufacturers/trellix/tes.html
Service outline diagram

Consistent product support and monitoring services
In some cases, the point of contact for inquiries about product specifications and the provider of the monitoring service are different, and in some cases the operation becomes complicated. increase.
* It is necessary to have a support contract for both EDR and monitoring services.
お客様運用工数の大幅削減が可能
S&J's SOC analysts with extensive experience analyze suspicious alerts from terminals detected and issued by Trellix, and contact customers only when deemed necessary. It eliminates the need for customer confirmation of all alerts that occur daily, and can contribute to a significant reduction in operation man-hours.
Easy-to-understand, to-the-point communication
We will also notify customers in an easy-to-understand manner with a focus on the points. Rather than simply posting alert information, we provide an overview of the situation and views at the time of detection, as well as points to check and recommended responses for customers.
Providing a flexible monitoring system that meets your needs
Monitoring response time can be provided 24 hours a day, 365 days a year (terminal isolation work agency is also available as an option). In recent years, it is easy to target non-business hours, and business hours are expanding to nights and holidays due to the diversification of work styles, and incidents tend to occur more often. monitor.
Flow until service introduction
