KYTL Services SOC Managés is a managed Security Operations Center (SOC) service offering multiple deployment models: SOC On-Premise, SOC On Cloud, and Micro SOC. The service is built around four core technology pillars: - NDR (Network Detection and Response): Provides network visibility, supports APT detection, and enables rapid incident response using collected metadata. - EDR (Endpoint Detection and Response): Delivers endpoint-level threat prevention and investigation capabilities suited for mobile environments. - MDR (Managed Detection and Response): Covers threat management, continuous network surveillance (including SIEM, SOAR, IDS/IPS, CTI), and threat hunting. - SIEM (Log Management): Handles compliance, normalized data, DataLake log storage, IT/OT/IoT convergence, and integrates SOAR, UBA, and DataLake capabilities. SOC On-Premise covers the full SOC implementation lifecycle, including log collection configuration, custom rule creation, and incident response planning. SOC On Cloud provides managed security through three pillars: security monitoring (log collection via secure VPN connections, event correlation aligned with attacker TTPs), incident response (with documented procedures), and intelligent threat management (multi-source threat intelligence for early detection and prevention). Micro SOC incorporates Machine Learning and AI-based predictive analytics along with a Threat Intelligence module, targeting malware detection, malicious behavior identification, endpoint data analysis for root cause determination, and zero-day threat response.