Expanded services include new use cases, correlation rules and business intelligence, administration, monitoring, alerting and response
Carlsbad, CA – July 24, 2017 – Proficio, one of the fastest growing global cybersecurity service providers, today announced enhancements to its existing Splunk offering to better assist clients in optimizing their SIEM investments.
Companies and organizations deploy Splunk® Enterprise and/or Splunk Enterprise Security (ES) to search, monitor and analyze machine data for new insights that impact the security of their business as an extension of their SIEM toolset. Because of the increased number of threats and alerts, many users lack the resources to adequately maintain use cases to keep up with the latest threats and administer Splunk to its full potential. Hiring an MSSP to deploy use cases, correlation rules and expert monitoring can help reduce alert fatigue and improve overall SIEM performance.
“Time and time again, we’ve seen companies that simply cannot manage and properly investigate the volume of alerts delivered by their SIEM because they don’t have the resources or processes in place to do so,” stated Brad Taylor, CEO at Proficio. “Through our enhanced services offering for Splunk customers, enterprises can leverage our resources and expertise to protect themselves from the latest threats while maximizing the return on their investment.”
Proficio’s enhanced managed services for Splunk include:
- 24×7 cloud-based security operations center (SOC)
- Monitoring, investigation, alerting and response
- Experienced cloud-based security analysts
- Proven use cases, correlation rules and workflows
- Intelligent, actionable alerts
- On-premises with Splunk Enterprise and/or Splunk ES or cloud-based Splunk instances
- Advanced analytics
- Threat intelligence
- Case management
- Custom runbook
Proficio offers two service platforms for supporting customers with Splunk deployments. The first is a managed service option for conducting administrative and maintenance tasks, and monitoring of log collection. The second is a security event monitoring and alerting service which provides 24×7 coverage, accurate detection, investigations to validate threats, alert notifications, response recommendations, and an on-call SOC analyst.
“Security teams are often overwhelmed by too many alerts and not enough visibility,” according to Taylor. “In general, a typical in-house security analyst can only conduct approximately eight investigations per day. That’s simply not enough in today’s evolving threat landscape. By adding Proficio’s services, proven use cases, correlation rules and expert security analysts, our customers get help turning Splunk Enterprise and Splunk ES into a response tool, not just an event monitoring channel.”
To learn more about Proficio’s managed services for Splunk, click here. If you’re attending Black Hat 2017 in Las Vegas and prefer to explore your options in person, click here to sign up and join us at one of our hosted events during the conference.
About Proficio:
Founded in 2010, Proficio offers the full range of cybersecurity services including managed detection and response (MDR), assessments and consulting to fully managed security operations centers located globally. As a next-generation MSSP, Proficio’s innovative approach to managed cybersecurity services help organizations defend against advanced threats and achieve regulatory compliance. Proficio provides 24×7 security monitoring, alerting and automated response services, primarily serving the utility, healthcare, industrial and consumer-focused industries. Learn more about Proficio’s cybersecurity services by visiting proficio.com.
