Managed SOC 24/7 · detection & responseRADAR
Eyes on your systems, day and night.
Our security operations centre, based in Casablanca, detects, triages and contains attacks 24 hours a day, 7 days a week.
What we hear
in the field.
Attacks at night
Ransomware often strikes at night or at the weekend, when nobody is watching.
Too many alerts
Firewalls, antivirus, servers: thousands of events that nobody has time to analyse.
Detection obligations
Law 05-20, DNSSI, BAM: incidents must be detected, logged and reported.
What we take care of.
Collection & correlation
- Managed SIEM
- Server, firewall and cloud logs
- Rules tailored to your business
- Compliant retention
Detection
- Level 1 to 3 analysts
- Threat intelligence
- Threat hunting
- Detection of compromised accounts
Response
- Triage and alerting
- Device isolation
- Blocking of accounts and addresses
- Escalation to RESPONSE
Reporting
- Real-time dashboard
- Monthly threat report
- Security committee
- Evidence for the DGSSI and auditors
Three levels, tailored
to your scope.
Monthly subscription or fixed price, depending on the service.
Essential
- 24/7 monitoring
- Qualified alerting
- Monthly report
- Essential sources
Business
- Response and containment (MDR)
- Monthly threat hunting
- Quarterly committee
- Extended sources
Premium
- Dedicated lead analyst
- Logs hosted in Morocco
- Custom rules
- Annual crisis exercise
How we work.
Scoping
Critical assets, sources, attack scenarios.
Onboarding
Log collection and tuning.
Monitoring
24/7 detection and response.
Improvement
New rules and lessons learned.
What you receive.
Who it is for, in practice.
Finance company
24/7 monitoring required by the regulator, reports for the audit.
Exporting manufacturer
Detection and isolation of ransomware, including at night and at weekends.
Contact centre
Detection of suspicious sign-ins on agents’ accounts.
Typical scenarios, shown for illustration.
Your questions,
our answers.
What is RADAR?
RADAR is the “Managed SOC 24/7” offer from Cyberacore, a cybersecurity entity based in Casablanca. Our security operations centre, based in Casablanca, detects, triages and contains attacks 24 hours a day, 7 days a week.
What does RADAR include?
RADAR covers four areas: Collection & correlation (Managed SIEM, Server, firewall and cloud logs), Detection (Level 1 to 3 analysts, Threat intelligence), Response (Triage and alerting, Device isolation) and Reporting (Real-time dashboard, Monthly threat report).
What are the service levels of RADAR?
Three levels, on a monthly subscription or at a fixed price: Essential (24/7 monitoring, Qualified alerting); Business (Response and containment (MDR), Monthly threat hunting); Premium (Dedicated lead analyst, Logs hosted in Morocco).
Which technologies does RADAR use?
RADAR relies on Sophos MDR.
How does a RADAR project start?
In four stages: Scoping (Critical assets, sources, attack scenarios), Onboarding (Log collection and tuning), Monitoring (24/7 detection and response) and Improvement (New rules and lessons learned). The Cyber Score Express helps frame the need beforehand.
Let’s talk about your
information system.
Two assessments to take stock: a concrete review, presented by our experts.