Since 2020 • IT Services • Cybersecurity • ISO Readiness info@gencombd.com

Cybersecurity Services

SIEM implementation, SOAR customization, SOC L1/L2/L3 support, forensic investigation, threat hunting, dark web monitoring, cybersecurity lab setup, VA and PT.

Operate and protect

Security services for practical defense and assurance.

SEC

SIEM Implementation

Paid or open-source SIEM planning, sizing, deployment, log onboarding, rule engineering, dashboarding and operational handover.

SEC

SOAR Customization

Playbook design, case workflow, alert enrichment, notification integration and incident response automation.

SEC

SOC L1 Support

Alert monitoring, triage, false-positive checking, escalation notes, IOC lookup and initial incident summary.

SEC

SOC L2 Support

Deeper investigation, timeline building, MITRE ATT&CK mapping, log correlation, containment guidance and technical reporting.

SEC

SOC L3 Support

Advanced threat hunting, detection gap analysis, SIEM tuning, playbook improvement and response strategy.

SEC

Forensic & Investigation

Endpoint triage, log analysis, evidence handling, root cause analysis, incident timeline and executive/technical report.

SEC

Threat Hunting

Hypothesis-driven hunting, IOC and TTP based hunting, log source analysis, detection content and recommendation report.

SEC

Dark Web Monitoring

Domain, brand, credential and leaked data monitoring with periodic reporting and response guidance.

SEC

Cybersecurity Lab Setup

Training lab, SOC lab, malware analysis lab, CTF platform, vulnerable VM and isolated network design.

SEC

Vulnerability Assessment

External/internal network, server, application, cloud and configuration assessment with risk-based remediation plan.

SEC

Penetration Testing

Web, API, mobile, network, Active Directory and infrastructure penetration testing with retest support.

SEC

Security Awareness & Simulation

Role-based awareness, phishing simulation, developer security and hands-on cyber drill preparation.

VA/PT Coverage

Vulnerability assessment and penetration testing scope

We can assess web applications, APIs, mobile apps, external/internal networks, Active Directory, servers, cloud configuration and security controls.

  • OWASP Top 10 and business logic testing
  • Authenticated and unauthenticated assessment
  • Risk-based vulnerability report
  • Proof of concept and remediation guidance
  • Retest and closure summary