HAWK.io SOC-as-a-Service is a managed security operations service that provides organizations with outsourced SOC capabilities across three primary service tiers. **Onboarding Services** The onboarding phase covers system and log integration, deployment of HAWK.io Virtual Engines, asset discovery and classification (on-premise, cloud, and hybrid-cloud environments), risk level definition, compliance requirement identification, and optional operational training. **Expert Support Services** On-demand concierge support is provided by security personnel for situations requiring specialized assistance. This includes: - Technical support: systems and performance management, vulnerability and threat management, and incident management - Audit services: audit requirements review, custom reporting support, and regulatory support - Litigation services: technical review of disclosure requirements, breach litigation support, and evidence collection and handling assistance **Investigative Services** Digital Forensics and Incident Response (DFIR) capabilities are integrated into the service. SOAR automation handles DFIR processes by assigning specific playbooks to contain and remediate incidents. Human-led investigation services are available upon request, covering immediate incident response guidance, historical data analysis for incident timeline creation, and on-demand DFIR expertise for subscribing clients.