Case Study: a Telecommunications and Internet Technologies Service Provider strengthens security monitoring with UnderDefense

Telecommunications and Internet Technologies Service Provider - Customer Case Study

The customer, a telecommunications and internet technologies service provider, faced significant challenges in protecting user data and ensuring system security following a major incident. To address this, they sought a cost-effective Security Operations Center (SOC) to improve threat detection, incident response, and overall security posture. They partnered with UnderDefense to implement a comprehensive security monitoring solution powered by Splunk to analyze logs and network events across their large infrastructure.

UnderDefense implemented a 24/7 security monitoring service that ingested data from over 2,100 endpoints and 600+ network devices. Their solution utilized a portfolio of over 300 correlation searches to detect threats, from malware and ransomware to insider threats, and provided timely notifications with strict SLAs. For the client, this resulted in improved incident management, a clear understanding of security event root causes, and the necessary log collection to meet compliance requirements, ensuring they did not repeat past security incidents.