24/7/365 Monitoring and Alerting

What Is Ingalls 24/7/365 Monitoring and Alerting?

Ingalls leverages a suite of detective tools, evaluates the output of these tools, and classifies security alerts based on a combination of custom, predefined alert rules, anomalous activity detection, machine learning, and curated threat intelligence. Cyber never sleeps — and neither does our SOC. Our analysts provide continuous security and monitoring to detect and respond to threats before they become breaches.

Security Alert Analysis and Reporting

Ingalls reviews alerts and events from security tools and integrated logs within your environment, analyzes those alerts and events for escalation to IT support staff for action along with recommendations. Reporting includes deployments, asset and rogue device discovery, and vulnerability scanning and remediation reports  as well as malware quarantines, network attacks, threathunting findings, and other events that represent realized risk within the Client’s environment.

Clients receive investigated and curated alert reports by email for the following:

• Malicious/anomalous network and endpoint activity

• Malicious/anomalous Windows endpoint activity

• Policy violations

• Threathunting