WUERTHPHOENIX Neteye Presentation

1 OUR PORTFOLIO

IT System & Business Cyber ERP CRM Service MGMT SECURITY intelligence

BUSINESS SYSTEM PROJECT SOFTWARE TRAINING SUPPORT CONSULTING INTEGRATION MANAGEMENT DEVELOPMENT

10.467.311.280 90% 75% pwned accounts malware of violations 2020 comes from email are caused by human error

Cybercrime will never end because it is profitable and low risk

Over 43 billion Threats yearly spent constantly evolving

DEFENSIVE OFFENSIVE

EXPOSURE ASSESSMENT PENETRATION TEST OneTime | SaaS | SaaS&Managed

VULNERABILITY ASSESSMENT PASSWORD AUDIT OneTime | On-Prem

GAP ANALYSIS SOCIAL ENGINEERING

SECURITY TRAINING RED TEAMING

EXPOSURE ASSESSMENT One Time | SaaS | SaaS & Managed

Verification of exposed resources OSINT

Reproduction of the attacker's point of view

Reconnaissance phase simulation WHAT

Mitigation and remediation actions

Company inputs collection Domain(s) | Keywords

Objects collection Hostnames | IP addresses | Account e-mail

Research of weaknesses

Research of correlations HOW

Creation of a detailed report

Report presentation Remotely

Surface Web Google Dorks | Organization website

WHERE Dark Web Data Breach Databases | TOR Network | Cyber Attacker Group Sites

Verification of exposed resources OSINT

Reproduction of the attacker's point of view

Reconnaissance phase simulation WHAT

Mitigation and remediation actions

Company inputs collection Domain(s) | keywords

Continuous objects collection Hostnames | IP address | E-mail account

Research of weaknesses

Research of correlations

Autonomous use of SATAYO Portal Graphs | Reports | Stats | Notifications HOW API for Monitoring platforms NetEye

Notification via Telegram and e-mail

Daily report generation

Surface Web Google Dorks | Organization website

WHERE Dark Web Data Breach Databases | TOR Network | Cyber Attacker Group Sites

Verification of exposed resources OSINT

Reproduction of the attacker's point of view

Reconnaissance phase simulation WHAT

Mitigation and remediation actions

Company inputs collection Domain(s) | keywords

Continuous objects collection Hostnames | IP address | E-mail account

Research of weaknesses

Research of correlations

Joinly use of SATAYO Web Portal Graphs | Reports | Stats | Notifications HOW API for Monitoring platform NetEye

Analysis and solution proposal Ticket | Phone call | E-mail

Daily report generation

Surface Web Google Dorks | Organization website

WHERE Dark Web Data Breach Databases | TOR Network | Cyber Attacker Group Sites

DEEP & DARK WEB

SATAYO provides detected evidences (per Ursula von der Leyen domain) appropriately filtered on the basis of Presidente della Commissione europea sources and keywords selected by cyber Ursula Gertrud von der Leyen, nata Albrecht, è una politica tedesca, 1 membro della CDU e Presidente della Commissione europea dal 1° security analysts team . Dicembre 2019. Wikipedia

1 All members of our team are CEH (Certified Ethical Hacker) certified and Source: https://doxbin.org/ are required to observe a specific code of ethics.

DATA BREACH

SATAYO is able to provide extracts of passwords and accounts used to register on services that have suffered data breaches; these are constantly updated by our cyber security analysts team.

No metric can be used with certainty to indicate how costly the data breach of Some examples a single access credential might be. The potential actions stemming from that . Unicredit (600k) data breach are wide-ranging and the . Università Campus values are calculated on the basis of Bio-medico di Roma (20k) the risk assessment specific to each organization.

SIMILAR DOMAINS

SATAYO is able to detect registered domains that are similar to the one used by your organization. In fact they could be xn--teslamtors-dx3e.com  teslamọtors.com potentially used to generate targeted phishing attacks (spear phishing).

REPOSITORY

SATAYO shows an extraction of the evidences (example: logs, config. files, passwords, etc...) detected within the repositories used by the developers of the organization.

WEAKNESSES

SATAYO shows the weaknesses detected on the organization's resources: . unmanaged social pages . poorly configured mail servers . SSL misconfigurations . management ports . insecure protocols

VULNERABILITY ASSESSMENT One Time | On-Prem

Vulnerabilities identifications

Vulnerabilities quantification

WHAT Vulnerabilities prioritization

Scope of engagement definition Private IP addresses | Public IP addresses

Cataloging of assets & resources

Identification of vulnerabilities for each resource

Vulnerability analysis and solution proposal HOW Creation of a detailed report

Report presentation Remotely

Networking equipments

WiFi

WHERE Server & clients

IoT & IIoT

Vulnerabilities identifications

Vulnerabilities quantification

WHAT Vulnerabilities prioritization

Scope of engagement definition Private IP addresses | Public IP addresses

Cataloging assets & resources

Continuous identification of vulnerabilities For each resource HOW

Integration of 3rd party system Monitoring | SIEM

Networking equipments

Server & clients

WHERE IoT & IIoT

GAP ANALYSIS

Identification of current risk controls

Identification of residual risks WHAT

Interview to organization key people

Use of CIS Controls

TM Analysis of «AS IS»

Identification of «TO BE» set of cyber actions HOW Creation of a detailed report

Report presentation Remotely

Physical interview

Remote interview WHERE

SECURITY TRAINING

Cyber Security Essential Tailored to the needs of the organization

Cyber Security Intermediate

Cyber Security Advanced

Exposure Analysis with OSINT WHAT

Social Engineering + ETEL game

Industrial Control System Security

Class room

Training on the job HOW

Customer site

Würth Phoenix

WHERE Microsoft Teams

PENETRATION TEST

Exploits detected vulnerabilities

Performed according to standard methodology WHAT

Vulnerability Assessment

Research on vulnerabilities exploitation NIST Methodology

Exploit

HOW Creation of a detailed report

Report Presentation

Networking equipments

WiFi

Server & clients

IoT & IIoT

WHERE Web services

Web applications

Mobile applications

PASSWORD AUDIT

Dictionary attack

Rainbow Table attack

Brute Force attack WHAT

Hybrid attack

Company inputs collection Password hashes

Cracking execution One method | Multi method

Creation of a detailed report HOW Report presentation Remotely

Active Directory

Database WHERE WiFi

SOCIAL ENGINEERING

Exploits of human factor

WHAT

Info gathering OSINT

Attack simulation

HOW Creation of a detailed report

Report presentation

Employees

Top management

WHERE Key people

RED TEAMING

Multi-layered attack simulation

Organization's detection and response capabilities test

WHAT Focuses on the objectives rather than on used methods

Info gathering OSINT

Identification of weaknesses

Attack simulation

HOW Creation of a detailed report

Report presentation Remotely

All organizational resources

WHERE

INCREASING AWARENESS SECURITY SOCIAL PASSWORD PEOPLE TRAINING ENGINEERING AUDIT

POSTURE COMPLIANCY GAP PROCESS ANALYSIS

SECURITY IMPROVEMENT VULNERABILITY PENETRATION IT SERVICES ASSESSMENT TEST

INCIDENT DETECTION RESPONSE EXPOSURE RED ORGANIZATION CAPABILITY ASSESSMENT TEAMING