Intrusion Detection/Prevention

Details and scope

Set up detection rules and analyst procedures for a bounded network and host environment. Sensor placement design, rule configuration, 10 benign test scenarios and triage guide. Test scenarios generate documented expected events and assigned handling steps. The stated scope is agreed before work starts; additional work is quoted separately.

Specifications

• Up to 2 network segments, 25 hosts and 15 detection use cases on customer-provided tools
• 72 specialist-hours including preparation, delivery, checks and handover
• Sensor placement design, rule configuration, 10 benign test scenarios and triage guide
• Acceptance: Test scenarios generate documented expected events and assigned handling steps
• Excludes: Appliances, software subscriptions, continuous monitoring and guaranteed detection