Trustwave SpiderLabs
Government organizations and their civilian agencies are under constant attack from a determined adversary. Defending against these attacks is a full time job and relies on a combination of technology, threat intelligence and skilled labor to implement a strategy based on defense-in-depth. Agencies and organizations have invested heavily in cybersecurity software and appliances in the last few years, but history has shown that these implementations frequently go untested until a breach occurs. Trustwave SpiderLabs has a forward-thinking approach and will not only review the technologies currently in place, but also test those same implementations utilizing offensive security practices.
As cyberattacks become more sophisticated and strategic, they are much more effective at breaching security and compromising your organization. Gain insight from Trustwave SpiderLabs into some of the best approaches to secure your cyber infrastructure to cope with ever-changing threats.
The SpiderLabs team at Trustwave includes security and penetration testers, incident responders, forensic investigators, malware reversers, security researchers, published authors and sought-after speakers. Our security breach investigations, malware reverse-engineering projects, millions of scans, thousands of penetration tests, leadership of open-source security projects and contributions to the security community have established Trustwave SpiderLabs as world-renowned experts on the past, present and future of security.
View the Trustwave SpiderLabs blog here
The SpiderLabs Retained Services engagement can provide Federal customers with the flexibility to engage our cybersecurity consultants on an as-needed basis without having to obtain a new contract for each unique service. Services that may be utilized under this retainer are listed below:
-
Digital Forensics and Incident Response
A quick and efficient response to a cyber-attack can save an untold amount of time, money and staff hours. Determine the source, cause and extent of a security breach quickly with Trustwave DFIR Consulting services. Or work proactively with the renowned Trustwave SpiderLabs team to better understand your organizations’ cyber-threat preparedness and solidify your posture against advanced threats.
-
Proactive Incident Readiness Services
With successful breaches on the rise, it’s a reality that your organization could become the victim of a compromise. The goal of the proactive IR readiness service is to help you address threat readiness before, during and after an incident. Multiple services are available to match your unique requirements to bring in stakeholders from across your organization.
-
Internal and External Network Penetration Testing
The Trustwave SpiderLabs Network Penetration Test service results in an in-depth test of the entire target environment and provides a detailed deliverable with both tactical and strategic recommendations to improve the security posture of the target environment. These recommendations are both actionable and advisory in nature and are presented to the customer.
-
Phishing Exercises
The Trustwave SpiderLabs Phishing Service is a practical testing exercise to determine the organizations’ resiliency to the emergent attack vector of social engineering and phishing attacks. As organizations harden their perimeter to keep intruders out, direct attacks against the external network are becoming increasingly difficult and impractical. Competitors’ phishing offerings only provide click-through metrics, but SpiderLabs can deploy payloads and accurately test email filtering and gauge your detection and response.
-
Web Application Penetration Testing
The Trustwave SpiderLabs Application Penetration Test service results in an in-depth test of the entire target application and provides a detailed deliverable with both tactical and strategic recommendations to improve the security posture of the target environment. These recommendations are both actionable and advisory in nature and are presented to the customer.
-
Trusted Advisor and General Consulting
Your organization may not have a direct need for one of the services previously listed but still requires general assistance with any number of cybersecurity issues. The TGS SpiderLabs team is here to assist you. With general consulting hours available, your organization can simply pick up the phone and get a confidential, well researched answer to nearly any cybersecurity question.
-
Blue Teaming
Blue teaming is used to help organizations focus and mature their ability to detect and respond to threats. A Trustwave Blue Team coach will work side-by-side with your responders to tune detection, hone process and improve network visibility.
-
Purple Teaming
Purple teaming is used to help organizations mature and get ready to defend their own environments by simulating real attacks like advanced persistent threats and ransomware incidents. At Trustwave SpiderLabs, we believe this is the very best way to prepare for red teaming, enhance your defensive capability and increase security maturity. We embed a red and blue team coach within your defensive team and train members in the offensive and defensive arts. In this exercise, a senior red team operator will act as a trusted advisor to teach an organization on how to validate its security posture.
-
SpiderLabs Training
SpiderLabs will prepare and deliver onsite or online training to prepare the customer’s offensive or defensive teams. We can prepare your CIRT to be the first on the scene, while preserving the confidentiality and integrity of the systems in question or improve your Red Teamer’s stealth and update their tactics with the latest tools. SpiderLabs experienced attackers and responders will share their combined experience, tools, techniques and success stories.