Leverage Difenda’s cybersecurity experts to strengthen your security posture. 

Powered by a combination of Microsoft’s security solutions and the Difenda Shield platform, Difenda MXDR For IT is an end-to-end process from receiving incidents to resolution. 

The model allows Difenda’s C3 team to monitor and respond to cloud service, endpoint, backend infrastructure, user, and email threats using out-of-the-box Microsoft 365 Security services, Microsoft Sentinel analytics, and Difenda’s proprietary capabilities.

thumbnail_difenda.jpg

difenda.jpg

DIFENDA

Services and solutions enabling detection of and response to cyber security breaches.   

Services include those delivered from a Cyber Security Operations Centre (SOC or CSOC) where a 24/7 team monitors for cyber breaches, and responds in real time when breaches are identified.

Solutions include technologies that firstly monitor for breaches, secondly flag when the occur, and thirdly facilitate remediation or best available response to a breach.

Managed Detection and Response (MDR) is generally the term used for the service, and Extended Detection and Response (XDR) is the term used for products or solutions used in MDR.

XDR is broken down into Network Detection and Response (NDR) - which deals with identifying threats at the network level, along with providing the appropriate response, and Endpoint Detection and Response (EDR), which deals with identifying threats at the endpoint, along with providing the appropriate response.

Managed Detection and Response  - MDR - and Extended Detection and Response - XDR

Endpoint security is providing protection against cyber attack for all an organisations' devices that exist on the edge of a corporate network. This can include servers, PCs, Macs, mobile phones, tablets, other user devices, and IoT (Internet of Things) devices. 

Endpoint security includes: 
EDR (endpoint detection and response), 
EPP (endpoint protection platforms), network firewalls 
IDPS, (intrusion detection and prevention systems), 
NDR (network detection and response), IAM (identity and access management), email security, mobile threat detection, 
SSE (security services edge), 
SIEM (Security Incident and Event Management), 
SOAR (security orchestration automation and response) 
...,all of which collectively are now known as XDR (Extended Detection and Response).

VPNs or Virtual Private Networks are an essential part of endpoint security, protecting against phishing or web-based attacks.

Endpoint Security

Firstly email security is about protecting your organisation from cyber attacks delivered by incoming malicious or spam emails.

Secondly email security is about enabling your organisation to send emails that cannot be spoofed, and have a profile that will be trusted, so that they get delivered to the in-box, rather than get shunted to spam, or blocked as unsafe.  In order to achieve this your SPF, DKIM, DMARC, and BIMI should be configured correctly.

SPF, or Sender Policy Framework, is essential.  If it is not in place, then a cyber attacker can set up a mail server, and start sending spoof emails that look exactly as if they have come from your domain name.

DKIM, or Domain Keys Identified Mail,  is a further protection against the spoofing of your email.  With DKIM setup, your emails will have a "key" that means the recipient can trust them.

DMARC stands for Domain-based Message Authentication, Reporting & Conformance. DMARC is a record on a domain that provides instruction to an incoming mail server, should any emails come in, using that domain, that fail to meet SPF or DKIM standards, how to treat that email (either reject, or send to quarantine).

BIMI or Brand Indicators for Message Identification is a standard that attaches your brand's logo to your authenticated email messages. With this visual verification, recipients can recognize and trust the messages you send.

A further level of email security uses PKIs (Public Key Infrastructure) that rely on "Certificate Authorities" (CAs) to vouch that a certificate is genuine, and allows the sender to digitally "sign" their emails.  Such signatures would need to be RFC "Request for Comment" compliant in order not to impact email deliverability.

Email security

Implementing people, process, and technology solutions to help companies reduce the risk of cyber attack. Providing information and consultancy services to enable companies to be cyber secure.  

Cyber Security

Understanding network, internet, and systems activity, and being able to flag events that are due to an attack or security breach.

Difenda MXDR. Bridge the gap between cybersecurity needs and resources to proactively stop threats before they impact your business.