PT Expert Security Center delivers detection, response, investigation, and security monitoring for corporate environments
Defensive services. Secure your future with PT ESC
Your trusted cybersecurity partner
PT Expert Security Center is a team of dedicated experts and threat researchers who elevate your company's security measures and enhance your incident response capabilities.
With over 20 years of experience, our team has been at the forefront of cybersecurity, assessing systems, investigating incidents, and studying major APT groups.
This rich experience allows us to develop unique, practical cybersecurity techniques tailored to your needs.
PT ESC defense team
PT ESC Services
Compromise assessment
We are implementing a holistic approach to identify indicators of compromise (IOCs), detect lateral movement, and uncover signs of persistent threats
Uninvited guests: how long do they stay?
How long can they stay unnoticed in the infrastructure?
Compromise Assessment is aimed to reveal any hidden threats within your infrastructure
Compromise assessment aims to reveal hidden threats within your infrastructure
- All in one approach which includes TI and dark-web research, third-party logs analysis, threat hunting and initial incident response
- Easy deployment to collect data
- Semi-automated analysis to highlight incidents
Compromise assessment use cases
- After major IT infrastructure upgrades or implementing a new solution
- A DFIR investigation followed a targeted campaign and the entire network needs clearance
- Regulatory requirements mandate regular compromise assessments
- There is suspicion of compromise without obvious incidents or indicators
- A partner, subsidiary, or supplier has been compromised
- A managed SOC is in place and effectiveness needs validation
- The industry has been targeted by an APT group or faces a mass cyberattack
- A merger or acquisition is in process
Approach
Key differentiators
Scale is never a limitation
Processes and tools adapt to any scope without compromising depth or speed
PT Dumper
Proprietary tooling that automates data collection, analysis, and correlation to identify threats faster with high accuracy, combined with AI and modern techniques
Nation-state grade threat intelligence
Deep contextual understanding of threats to connect events and uncover sophisticated adversaries
Compromise assessment results include
Get a report
To receive a sample report, please contact to your sales representative
Incident Response
Each incident must be treated as a learning opportunity to prevent recurrence. Experts help organize a proactive response, contain the breach, and mitigate consequences together with your cybersecurity team
Approach
Key differentiators
Unique field expertise investigators handle many high-profile breaches
PT Dumper live response utility distilled from 15 years of DFIR experience
Rapid, adaptive response no two cases are identical; methods adapt to the environment and team
Deliverables
Results includes
- Executive summary: overview of threats and findings
- Technical analysis: incident timeline, exploited vulnerabilities, and impacted systems
- Malware classification: behavior and impact assessment when applicable
- Remediation plan: steps to mitigate current risks and prevent future attacks
What you get
- Containment: halt incident propagation, mitigate damage, and prevent escalation
- Evidence collection: live-response dumps, logs, network traffic, disk images, memory captures, and related artifacts
- Analysis: reconstruct timelines, identify attack vectors, and analyze malware when present
- Remediation: IoCs, scanning tools, and actionable recommendations
- Malware analysis: examine functionality and infection methods, with updates to the threat knowledge base
Malware analysis
Malware remains the weapon of choice for modern adversaries, from ransomware operators to nation-state actors. Sophisticated samples often evade traditional tools through anti-analysis techniques, polymorphism, and zero-day exploits. This service combines advanced tooling, proprietary techniques, and deep threat intelligence to analyze complex malware and help organizations defend against future attacks.
Approach
Static and dynamic analysis
Contextual enrichment
Remediation guidance
Reverse engineering
Deliverables
Results includes
- Executive summary
- Technical analysis
- Threat intelligence enrichment
- Remediation roadmap
What you get
- Rapid analysis: delivered in hours, even for complex samples
- Actionable intelligence: prioritize threats by risk with clear remediation steps
- Threat hunting integration: share IoCs, directly with SOC and hunting teams
- Cross-platform support: analyze malware targeting Windows, Linux, macOS, IoT, and industrial control systems
Expertise
Fortune-Telling on Goffee Grouds: Сurrent Tools and Features of the Goffee Group in Attacks on Russia
Fortune-Telling on Goffee Grouds: Сurrent Tools and Features of the Goffee Group in Attacks on Russia
Thinking about the best way to protect your company?
Contact us.
During the consultation we'll propose a solution precisely tailored to your organization.