Past Technology Projects
Contact us for more information about past projects or to discuss you immidiate needs
SIEM Design and Roll-out
Astrid Consultants built the largest SIEM in the world (at the time) for a major banking group. They also refreshed this deployment with a new technology three years later. This new design was still operational ten years after deployment and supported multiple SOC teams.
In total Astrid Consultants have been involved in the design and deployment of approaching 200 SIEMs.
Priviledged Access
Our consultants designed and deployed one of the largest priviledge access management systems with over 100,000 servers under full control. This system removed significant risk and closed a major audit point. Before the design work could even start it was necessary to understand organisational processes across multiple departments. Things like Break-Glass and Developer Access to production processes had to be analysed and ratified before the technical design work could begin.
The consultant even won an award as this was considered the most valuable technology deployment of the year.
Microservice Automation
We developed a system to analyse security data feeds and to spin up workloads to process them when they met configured criteria. The system saved the organisation over 1$M annually and relied upon a Kafka message bus and bespoke components which integrated with their existing systems.
Bespoke Components
Astrid consultants are not afraid to roll their sleeves up and get stuck-in. In one case, our consultant delivered a new neural algorithm for the detection of anomalies in a UEBA SIEM. This was not just a new configuration, but a wholly new way to isolate risk in a complex environment.
On several occasions we have built small components to interface different security systems, feeding data from one to another. An example of this work was integrating a Data Loss system with a SIEM and an HR system to reduce DLP false positives.
Organisational Design
As well as technology we also design organisations. In one case we worked with a major European telco to redesign their security organisation ensuring it met modern standards.
Our consulatants are regularly called upon to give advice – from helping with SIEM sizing and data feed selection to reviewing bespoke application code or protocols, from designing big data infrastructure to helping to explain secure coding practices. We are always happy to help and might even solve your problem on our initial scoping call.