SOC as a Service - Artic Wolf

I've just adopted an Artic Wolf system in a new role. Does anyone have any experience using or have any best practices to share? There is a lot of information available. Want to get a laser focus and determine what is best to focus.

Find more posts tagged with

siem configuration

soc

Artic Wolf

Comments

LonerVamp

Never heard of it.

chrisone

I spoke to them last year. They were heavily considered by my employer. I believe they use the SUMO SIEM. Most of your questions will be answered by them but they are your MSSP from what it sounds like. Start figuering out what kinds of dashboards, alerts, data you want to see or be alerted on by them. They manage endpoints as well, do you have those services with them? Do a weekly or bi-weekly call with them and they will help you setup anything you desire.

Think of them as the extended smart guys of your team who will stop what they are doing to assist you. Get familiar with them don't be afraid to ask them things about their current day or where they are from, open up a dialog.

Sorry I dont have any client customer experience with them only a few conference calls based on MSSP services we were looking at.