Soleil IT Services, Inc.-

Cyber Security Practice: AI | ML Algorithms Leveraging Splunk

This is an ongoing development project with Professor A. Makowski, Dept. of Electrical Engineering, University of Maryland, College Park, MD. The focus is on malware intrusion detection, based on malware invariant behavior within the framework of the kill-chain model or the MITRE ATT&CK framework.

Splunk Consulting Practice

Each consulting engagement starts with the development of a detailed SOW and timeline in consultation with the customers. Documenting requirements, performance measures, architecting a solution, deployment, testing and skill transfer follow before the deployed site is turned over to the customer.

As needed, maintenance work can be performed. Remote work is an option.

Our approach provides major advantages:

Consulting and technical expertise as required by Splunk. Our staff holds the highest certifications: Splunk Certified Architect, Splunk Certified Consultant I, RedHat Certified System Engineer
Shared responsibilities in the articulation of crisp requirements between customers and consultants, the development of a detailed & well-defined SOW, and implementation timeline
Skill transfer, step-by-step implementation documentation are two important ingredients that we provide with each engagement. We want the customer to succeed in maintaining the new systems.

Experience: Splunk multi-site clusters, Enterprise Security.

Customers: TASC/Engility, Freddie Mac, North American Management, Northrop Grumman, U.S FDA., U.S DHS/CBP, U.S. DHS/HQ/ESOC, U.S. Army GFEBS Cloud Migration.

Staff's IT Certifications

Splunk Certified Architect, Splunk Certified Consultant I
Cisco: MCNS, PIX/ASA, IDS, CCNA, CCSI, CCNP
ISACA: CISM
(ISC)2: CISSP
Microsoft: MCDBA, MCSD, MCAD
Red Hat: Certified Systems Engineer
VMware Certified Professional
ITIL: Foundation V3, Practitioner V2

Professional Leadership

Speakers at major Cisco, IBM, IEEE conferences since 1984

Federal/State Contracting Vehicles

Small Business - State of Maryland, SBE certification number SB09-6061
Small Business - State of Virginia, SWaM # 671970

Additional Resources & Tools for the Security Practitioner

Checking on the "reputation" of websites

Finjan URL analysis: http://www.finjan.com/Content.aspx?id=574
Google UnMask Parasites: http://www.unmaskparasites.com/
Malware stopBADware.org: http://www.stopbadware.org/home/reportsearch

Dissecting suspicious websites for malware

Analysis of URLs HTTP request and responses: http://web-sniffer.net/
Anubis Analysis of URL: http://anubis.iseclab.org/
VirusTotal for malware executable: http://www.virustotal.com/
Anubis analysis of executable: http://anubis.iseclab.org/
Jotti's malware scan: http://virusscan.jotti.org/en

Current & emerging Internet threats

CERT: http://cert.org
SANs: http://sans.org/
Internet Storm Center: http://isc.sans.org/
SecureWorks: http://www.secureworks.com/
SRI Malware Threat Center: http://mtc.sri.com/