1

Check Point Incident Response Service

EMERGENCY RESPONSE Are you under attack? Call our toll-free hotline or email us now.

GLOBAL COVERAGE Australia: 1800-467-476 Austria: 0800 281467 Belgium: 0800 71 606 Brazil: 0-800-591-9043 Bulgaria: 0800 46 023 Canada: +1(866)923-0907 Colombia: 01800-518-9368 Denmark: 808-20303 Germany: 0800-183-0489 Hong Kong: 800-906-060 Hungary: 06-800-20089 India: 000-800-040-1307 Indonesia: +62-21-27899834 Israel: 1-809-457227 Jamaica: 1-866-837-4568 Japan: (0800) 0800-888-3034 Kenya: 0800 221 9007 Mauritius: 802-049-0012 New Zealand: 0800-453749 Nigeria: +234-1-227-8927 Norway: 800-25-060 Russia: 8-10-8002-6951012 Saudi Arabia: +966 0811-100-8153 Singapore: 800-492-2448 South Africa: 080-098-4054 Spain: 900-804914 Sweden: +46-101388675 Switzerland: 0800 835 281 UK: 0-800-088-5471 Ukraine: 0-800-501732 United States: +1(866)923-0907 Country not listed? Email us at: emergency-response@checkpoint.com

Help When You Need It Most When a security incident happens, the steps you take are critical to a successful outcome. Responding to an incident can be daunting. Where do you start? How quickly can you assess and contain the threat? Who do you call for help?

The Check Point Incident Response Team is here to help, 24x7x365. We’re a comprehensive service with responders that are equipped to quickly investigate and contain attacks and a focus on getting you back to business fast.

How Does Our Service Work? Within 30 minutes, our responders engage with you to handle any aspect of a security incident, big or small. We have a broad range of services designed to contain and remediate your incident. We then offer a post-incident report to provide you with the technical details of the attack, identify the root cause, and make recommendations to prevent or mitigate future attacks.

Key Service Benefits Complete Incident Handling We handle the entire incident lifecycle from triage to containment and remediation with detailed documentation and reports.

Extension of your SOC/IR Teams Our team leverages individual service components with your existing

A Bridge to Research and Intelligence The Incident Response Team works hand in hand with Check Point global research teams, intelligence partners, national Computer Emer- gency Response Teams (CERT), and law enforcement to understand the broader context of your security event.

Proactive Services We use the experiences from handling thousands of incidents per year to help advanced customers prepare for the worst. Not only do we pre- pare your systems and networks, but we also prepare your IT staff and executive management.

Incident Response Service

2

Unique service capabilities REACTIVE PROACTIVE

Multi-threat Analysis Check Point is the only company to offer insight and remediation for different types of threats, including: • Firewall • IPS • Applications • Data Loss • Malware • Botnets • Unauthorized access • Denial of Service

Real-time Remediation Real-time remediation is only possible with access to real-time data. We collect your logs and then encrypt, compress and store them for immediate access to data should an attack occur. Your logs are refreshed every 30 days to capture the latest information and speed remediation time so you can get back to business. Customers can always view their logs via the Incident Response portal.

Incident Response Services • Incident management and organization • Threat hunting • Threat containment • Digital forensics (disk/memory/logs/network) • Malware analysis • Phishing mail analysis • DDoS analysis and mitigation • Incident communications to management level • Reports tailored for your organization

Compromise Assessment Our team works with your organization to actively hunt for signs of current or past compromise. This includes reviewing existing security architecture, looking for vulnerabilities, and identifying risky

across your network, endpoint (Windows and Li- nux), and email (on-premise and cloud).

Maturity Assessment We work with your organization to review the entire security ecosystem with a focus on your security

Incident Response Plans and Playbooks IR planning is stressful. It’s critical to provide a detailed incident response plan that’s understood by the organization. Our experience can help you navigate IR design plan challenges. We also create brief, tactical playbooks used for handling detailed technical tasks during incidents.

Enhance Your Capabilities Our focus is to educate and hone your staff’s skills and abilities to respond to incidents as they happen. We provide assistance at any stage of the incident handling process from complete ownership to augmenting your existing internal capabilities.

Contact us To learn more about Incident Response services, contact your local Check Point representative or visit our website today.

https://protect.checkpoint.com/v2/r02/___https://www.checkpoint.com/services/incident-response/threatcloud-incident-response/___.YzJlOmNwYWxsOmM6bzo1YmI3OTllNTk2ZjRkZDg0NTc3NDM0MjFkMDkwODgxZDo3OjdjNzk6NDk4NGNlZjJjMmE1YWEzNjlmMjg4YWNkYTllNDJhMjM2N2VjZDRjOTk5NzI2NzI4ZjYyN2M4MWIzN2JjYTgyZTpwOlQ6Tg