ESH provides a state-of-the-art Security Operations Center to its partners, combining the best knowledge about cyber-attacks with best-in-breed technology, and the R&D needed for tomorrow's challenges.
© photo: Norbert van Onna
An MSc project at ESH built an AI assistant that adds knowledge from past investigations and threat reports to the alert an analyst is working on. Eight of our analysts tested it on a realistic malware case.
The ESH-SOC is integrating behaviour profiles into its monitoring of sign-ins to Microsoft’s cloud. The method comes from a study by TU/e and the SOC, tested on five months of sign-in logs from one of the SOC’s customers, a Dutch IT service provider, and checked by two of its senior IT managers.
Every analyst at the ESH-SOC investigates alerts along the same four stages, and every new tier 1 analyst learns them in training. The structure comes from a study by TU/e and the SOC, in which analysts who followed it recognised alerts caused by attacks far more often.
ESH combines cutting-edge knowledge on cyber-attacks and cyber-adversaries with best-in-breed technology to provide tailored SOC-services to our partners and their customers.
Knowledge on attacks and adversaries from our own research, put to work in detection and response.
Security monitoring of IT and OT environments, built on a state-of-the-art infrastructure.
Efficient response through our partners, tailored to each customer: the right combination of knowledge and dedication, not one size fits all.
Research focus
Why we are unique
World-leading R&D, accelerated technological innovation, practical expertise in industry and government, optimised managed services and experienced management, in one place where security operations and research enrich each other every day.