01
Incident Response
On-demand intervention.
Service details
Qualification · Containment · Investigation · Eradication · Remediation report
Choose the level of protection you need today. FEC can run it for you or help you build your own capability.
01
On-demand intervention.
Qualification · Containment · Investigation · Eradication · Remediation report
02
Preparation, on-call and SLA.
Set-up prepared in advance · Experts ready to mobilise · Defined response time
03
Managed monitoring, 8x5.
Detection · Alert qualification · Escalation to your teams
04
24/7 SOC, Threat Hunting and response.
Continuous monitoring · Advanced investigation · Containment support
FEC helps define the target model, choose the tools, integrate them and hand over gradually to internal teams.
The aim is not to make the client dependent on the managed service. FEC can run the SOC over the long term or organise a full move to autonomy.
01
Organisation, processes, skills, coverage and response capability.
02
Target model, priorities, trajectory and governance.
03
SIEM, SOAR, EDR/XDR, log collection, use cases and playbooks.
04
Documentation, training, mentoring and handover.
01
Scoping, information gathering, procedures and responsibilities.
02
Log sources, rules, use cases and qualification.
03
Investigation, containment, remediation and communication.
04
Lessons learned, rule tuning and new scenarios.
Defined timeframes, roles and escalation paths.
A clear view of events and risks.
Actions prepared before the crisis.
A documented model that can be handed over to internal teams.
Incident in progress · Preparation · Managed monitoring · Building your SOC