2025-04-28-minutes-it-study-session

Home Browse Search

©2025 Lumifi Cyber, Inc. All rights reserved. PRIVATE - Controlled by Lumifi Cyber 4/18 PRIVATE - Controlled by Lumifi Cyber SERVICE DESCRIPTION Lumifi Cyber’s Cybersecurity-as-a-Service provides a comprehensive set of cybersecurity services for organizations. This document outlines LUMIFI’s Managed Detection & Response (MDR), where LUMIFI monitors customer environments for threats and provides notification & response if threats are detected. Additional add-on services are also described in this document, such as Log Retention (LR) and Continuous Vulnerability Identification (CVI). A full listing of Customer’s in-scope services is listed on the Statement of Service. Professional Services work will be detailed in a separate Scope of Work. Lumifi Cyber’s MDR service is built to both monitor customer’s existing security products, along with complimenting those products with additional services such as LUMIFI-supplied Collector(s), Virtual Sensor(s) and a 24x7 SOC. The in-scope Log Sources, Products, and Services that LUMIFI will monitor as part of the MDR service for the Customer are documented in the Integration List. The level of services that LUMIFI can provide depends both on the product capabilities that the customer is licensed for (i.e. Microsoft license level, licensed 3rd-party Endpoint Detection and Response (EDR) capabilities) and what LUMIFI’s service is set up to support. Lumifi Cyber’s Collector installed on LUMIFI owned and managed hardware allows LUMIFI to monitor network traffic for on-premises environments. The Collector includes an intrusion detection system to monitor for threats, allows Customer to transfer syslogs and Windows events to LUMIFI, along with providing continuous packet capture for LUMIFI to review throughout the MDR service. Lumifi Cyber’s Virtual Sensor for deployment on Customer-owned and -managed hypervisors allows LUMIFI to monitor network traffic for on-premises networks without deploying new LUMIFI hardware. The Virtual Sensor, which comes as a virtual machine image includes an intrusion detection system, deep packet inspection and a threat sandbox to monitor for threats and allows Customer to transfer syslogs and Windows events to LUMIFI. Lumifi Cyber’s Linux Server Sensor for deployment on Customer-owned and -managed Linux Servers allows LUMIFI to monitor Linux Servers without deploying new LUMIFI hardware (NOTE: the Linux Server Sensor does not ship Linux logs). The Linux Server Sensor, an agent installed by the Customer, allows LUMIFI to monitor process information, command execution, files, and file events. The Linux Server Sensor converts that information to metadata that then correlates traffic, processes, users, and commands for sec urity, DDoS, and breach attempt detections. Lumifi Cyber’s Log Retention is an additional service designed and meant for long -term, secure, and compliant log storage where LUMIFI retains, encrypts, and hashes customer logs sent to LUMIFI’s on -premises Collector(s). Customers can then request a time-bounded extract of their logs by submitting a request to LUMIFI. LUMIFI’s Continuous Vulnerability Identification service is an additional service that runs on the Collector which utilizes an industry-standard network active scanning product to identify system vulnerabilities. LUMIFI provides reports and dashboards for customers to manage their prioritized vulnerabilities. The customer journey starts with onboarding where LUMIFI and Customer work together to integrate products to activate MDR & additional services. Lumifi Cyber will monitor the in-scope products and respond to threats as they are detected, following the Rapid Quarantine Playbooks agreed with Customer where relevant, and, where applicable, providing response playbooks to Customer based on industry best practices.