Services
Security
Our team of security advisors can advise on selecting and improving your SIEM (Security Information and Event Management) systems including Splunk, CrowdStrike Next-Gen SIEM / LogScale.
Data Analytics
We are specialists in giving you valuable insights to your data. We provide affordable means of data collection and visualisation to meet your needs.
DevOps
Our team can assist with CI/CD and task automation to help achieve lower operational costs and decrease your product speed to market.
Work
Major Telco and Big 4 bank
The challenge
Our clients have existing Splunk SIEM solutions to safeguard IT systems from potential threats. Data collection from various sources such as firewall, identity and access management systems, load balancers is complicated and time consuming.
Our solution
We delivered our solution end-to-end from requirement gathering, design, testing and implementation.
We worked with data source subject matter experts to understand data from various sources, ingested the data in the most efficient way and defined schema according to industry security standards.
As a result our client is able to maximise the ROI of the Splunk SIEM solutions.
MSSP
The challenge
Our client is a Managed Security Services Provider which runs a SOC (Security Operation Centre) for their customers. They had recently migrated to a new SIEM solution and needed to migrate data and knowledge objects e.g. dashboards and security detections to the new SIEM
Our solution
Client has a large customer base, and receiving security events from vast variety of vendor products. Our team of experts migrated existing data and onboarded new customer data, and worked on normalising security data for the SOC. We asisted with creation of dashboards and detections, and made data useable for SOC analysts.
Client was able to improve their managed security and customer services, and maximise ROI for new SIEM solutions.
Fortune 500 insurance provider
The challenge
Client faced a pressing deadline to transition its security operations from a legacy SIEM to CrowdStrike Next-Gen SIEM. The goal: centralize security log ingestion and detection capabilities on the new platform, while maintaining the existing SIEM for application performance monitoring. With regulatory requirements and cyber threats on the rise, the client needed a fast, seamless, and risk-managed migration — with no disruption to security visibility.
Our Approach
Our consulting team partnered closely with the client’s security operations and engineering teams to:
-
Accelerate migration of detection logic from the legacy SIEM to CrowdStrike Next-Gen SIEM.
-
Conduct detection tuning to reduce false positives and align with the client’s threat model.
The Outcome
-
Migrated core security detections, enabling faster threat detection and response.
-
Ensured data integrity and continuity, with no loss of security visibility during the transition.
-
Positioned the client to scale their modern security operations with lower operational overhead.
