Recorded Future Intelligence Services

Security Operations Capabilities Review

An onboarding engagement to better understand our customers priorities, security organization, tools leveraged, important use cases and direct them to the usage of integrations and services that would fit their objectives.

1

Security Operations Use Case Development

For technical operations to scope and implement use cases that can leverage Recorded Future’s intelligence in SIEM and SOAR environments. Deliverables generally include playbooks, correlations rules, workflow recommendations for Customers to implement.

1-3 (scoping required)

Solutions Architecture Review (AR +)

The Solutions Architecture Review leverages Recorded Future experts in the SOC design and the security tool integration space to review an organization’s current security operations, strategy and capabilities. This review will lead to the creation of a design that can be leveraged to help identify and provide roadmap recommendations to enhance existing operations and integrations. Outcomes may include; better use of current integrations, unrealized capabilities leveraging the platform or intelligence data, following focused workshops on topics of interest (e.g. vulnerability analysis, use case development).

1-3 (scoping required)

Integration Deployment

Remote assistance with implementation and initial configuration of integration with a single application as listed here: https://www.recordedfuture.com/integrations/details. This helps to ensure a successful start to the deployment via best practice set-up, data flow, and configuration for your use cases.

We will review the current integration set up with you to help ensure your current integration is working to its full potential. This will enable us to review whether the settings are configured to give optimal results and help map your metrics to outcomes.

1

Integration Health Check

A comprehensive evaluation to optimize the performance of a single available Recorded Future integration. This health check ensures the integration aligns with best practices, leverages the full capabilities of the third-party tool or platform, and continues to meet your evolving business needs.

1

Vulnerability Analysis

Our Solutions Architecture team will facilitate a comprehensive analysis of your vulnerability scans and workflows. We will deliver a report of prioritized vulnerabilities and enhance your scans by incorporating Recorded Future's threat intelligence. Additionally, if integration pathways are available, we will recommend pre-built integrations to help you establish a repeatable process, ensuring continuous improvement in your security posture.

1

Custom Integration Configuration

Assistance in engineering data flows and interaction between Recorded Future APIs and third-party systems.

scoping required

Alert Benchmarking Workshop

Deep dive review on the performance of Recorded Future Alerts related to your Priority Intelligence Requirements. Configure Alerts and receive recommendations on how to optimize Alert workflows in Recorded Future.

1

Capture-The-Flag

Competitive training scenarios designed in the Recorded Future Platform. The interactive workshop will test what analysts have learned with prizes for winning teams.

1

Custom Solution

If there is a topic or requirements outside of what's listed in the catalogue, we offer a personalized, high-value service tailored to your unique needs. This option ensures a customized approach that goes beyond the standard offerings in our service menu, giving you access to specialized expertise and a bespoke solution.

1-3 (scoping required)

Intelligence Capability Assessment

Benchmark your current Intelligence program against wider industry and explore recommendations to continue maturing your organization’s program.

1

Intelligence Objectives Workshop

Identify and map intelligence and compliance objectives to turn them into Priority Intelligence Requirements so you can build the foundations of an intelligence-led security program.

1

Threat Briefing

Our intelligence experts have a variety of subjects they can cover with briefings based on Recorded Future intelligence and research.

1

Tabletop Exercise

Work through a real-world security scenario and learn how to mount an effective response to simulated threats with Recorded Future.

1

Threat Profiling Workshop

Identify the most pertinent intelligence gaps and map these to the MITRE Framework. Additionally, receive recommendations on specific remediations regarding threat actors looking to target you.

1

Threat Reporting Workshop

Review best practices for writing and presenting tactical, operational, and strategic intelligence using Recorded Future.

1

Malware Intelligence for Incident Response

Implement processes to apply Malware intelligence based on IOCs & Signatures gathered from your environment and recommend ways to narrow investigation and extract most impactful indicators.

1

Hunting in the Sand (Threat Hunting)

Implement repeatable workflows to assess risk to organization from priority threat actors and malware enriched with Malware Intelligence

1

Periodicals

Reports delivered on regular cadences (weekly, monthly, quarterly, annual). These reports typically cover threats to a customer, their industry, and information technology overall, although all sections are customizable to a customer's intelligence requirements. The longer the cadence timeframe, the more strategic the analysis.

Scoping required

Flash Report

High-level overview of a requested topic. Flash reports often respond to urgent intelligence needs where awareness is more important than depth.

Scoping required

Current Intelligence Report / Threat Profile

Our standard format for intelligence on a requested topic. Current Intelligence reports usually provide information and analysis about a single topic area based on data from the last 3-6 months.

Scoping required

Focused Intelligence Report

Our most detailed analysis specific to a requested topic. These reports normally cover longer research timeframes (e.g. 1+ years), broad research categories, or highly niche domains.

Scoping required

Threat Actor Engagement

Obtainment of compromised data from criminal sources, marketplaces, or social media. Our coverage and pricing varies based on the cost of advertised data and the infrastructure necessary to access that data. Examples include: Dark Web Buys; Dark Web Engagements; Ransomware Data Downloads

Starts at 3 credits

Hunting Package

A detailed report including malware behavior analysis, IOCs, and detection rules. Past hunting packages have included YARA, Snort, and Sigma detections.

3-5 credits (scoping required)

Business Risk and Executive Protection Reports

An analysis of kinetic or geopolitical risks, often as they affect a specific organization's employees. Executive Protection reports can also examine individuals' digital footprints to identify information that could invite cyberattacks or social engineering. Examples include: Executive OSINT Report; Travel Risk Assessment; Country Risk Profile; Company Affiliation Investigation

1-3 credits (scoping required)

Managed Monitoring Services

By enhancing your security team with our dedicated team of security experts and analysts, you will be able to manage increased workloads and alert volumes. Our team of experts is ready to assist with the various types of monitoring required to help protect your organization. We are available 24x7x365 to help monitor, troubleshoot, and remediate the threats that your security team is facing.

Scoping required