Advisory

---

When ransomware strikes, it can take not only your data but also your business and future with it. Identifying gaps, remediating vulnerabilities, and rapidly responding to threats can make a world of difference to your revenues and reputation. And to your regulatory compliance and long-term insurability. 

As the threat landscape continues to evolve, so does the need for planning. Summit V's Sherpa Advisory Security Services team provides strategic guidance and implementation support to ensure our clients improve and mature their security capabilities to keep pace with today’s risks. Our approach leverages deep threat insights captured from Summit V and partners incident response work to create real outcomes in security for our clients. 

Attacks are inevitable, but your organization can be ready when they occur. Our experts simulate real threat scenarios drawn from actual cases we’ve investigated to surface vulnerabilities and assess readiness. Then, we deliver actionable recommendations to increase the organization’s resilience to attack and mitigate risks. We bring the same level of rigor to non-scenario-based assessments to ensure that our clients receive high-impact insights, regardless of their testing and assessment needs. Services include: 

Objective-driven attack simulation intended to identify complex vulnerabilities not detectable with automated scanning.

Scenario-driven attack simulation to emulate specific adversaries and threat tactics in order to provide a holistic picture of enterprise resilience against key risks.

 Framework-driven assessment of an organization’s alignment with industry standards and legal/regulatory requirements.

Automated scanning to collect and analyze data to identify assets, vulnerabilities, and malware.

 We can help clients create and audit IR plans that meet the current audit and compliance requirements.

Threat hunting is a proactive search for cyber threats that are already inside the infrastructure. Threat hunters develop hypotheses based on information gathered about new threats and combine that with knowledge about adversary tradecraft.  They use threat intelligence to expose potential and ongoing attacker activity and apply advanced analytics to detect suspicious behaviors among the massive amount of information captured by security systems. Threat hunting is an ongoing process.

A compromise assessment, on the other hand, typically conducted on a periodic basis, oftentimes quarterly or monthly for point in time analysis and in some cases to meet regulatory requirements. The scope of a compromise assessment is also significantly greater than that of a threat hunt: a compromise assessment looks not only at indicators of compromise and indicators of attack, but also at the reasons they may have occurred, what next steps are in order, and what actions can be taken to improve the organization’s overall security posture.

Summit Forensics automates the collection of point-in-time and historic forensic triage data, enabling teams to conduct effective and efficient compromise assessments on a periodic basis. As a single solution to analyze large quantities of data, both historical and in real-time, Summit Forensics eliminates the need for disparate tools or data ingestion methods, simplifying analyst workflows. Customizable preset dashboards were developed in concert with the Summit team to have the highest signal-to-noise ratios.

Summit Forensics enables teams to rapidly deploy at scale, supporting collections from tens to hundreds of thousands of endpoints. The dissolvable executable performs the collection before removing itself from the systems, so analysts don’t have to maintain and manage another agent on systems, further reducing complexity.

For organizations that want the industry’s most comprehensive assessment done for them, the Summit Services Compromise Assessment leverages the Services team’s years of experience in responding to intrusions by the most advanced attackers. Together with the most powerful and innovative platform on the market, industry-leading cyber threat intelligence and 24/7 threat hunting, organizations can answer the critical question: “Has my organization been breached?”