Create scenarios and practise continuously.

Flexible IR provides a system which allows you to search or create scenarios and practise them as real cases. We support planned IR skill development by the manager. The advanced search for real time incidents is on a independent system at www.needle365.com

Below is an use case of how a scenario is searched, simulated and handled.

Needle365.com

A exclusive search engine for real cyber incidents.

Search for incidents to practise

Basic search criteria. Eg - Stolen Laptops, DDoS etc.

Advanced search - Victims

Advanced search for based on victims, attacks, actors etc.

Advanced search - Incident Type

Search based on type of Incidents - Defacement, hardware tamper etc.

Search results - Select interesting cases.

Select cases relevant to the organisation and having IoCs.

Create a case and add corresponding IoCs

Case created with details added for full incident handling.

Case and template specific board created.

Confirmation screen indicating case and board link in Flexible IR platform.

Kanban Board for case handling

From here on the case is handled like actual event with IoCs for investigation.

Key Features

Advanced Scenario search

Evolving runbooks using Symbolic AI system integration. We provide understandable and easy baseline runbooks to handle incidents. The runbooks can be customised to your specific environment and security analyst. Expert audit of runbooks.

Planned IR development

Easily coach the less experienced members of the team in threat hunting and incident response topics. Simulate adversary use cases and practise. Plan skill development for your analysts. Move towards critical 1-10-60 rule for Incident response.

Skill Matrix & Points

Per analyst skill matrix and point systems to bring in continuous motivation and planned learning. System supports basic gamification for card based games.

Realtime scenarios from Verisdb and Flexible IR curated list.

Planned IR skill development

A simple and efficient system for IR skill development. Scenarios can be created by searching for real cases and using the corresponding Indicators of Compromise (IoCs).