{"id":1755,"date":"2025-05-20T16:33:13","date_gmt":"2025-05-20T14:33:13","guid":{"rendered":"https:\/\/www.sycope.com\/post\/analysis-of-security-events-in-sycope-nsm"},"modified":"2025-06-27T14:43:15","modified_gmt":"2025-06-27T12:43:15","slug":"analiza-zdarzen-bezpieczenstwa-w-sycope-nsm","status":"publish","type":"post","link":"https:\/\/www.sycope.com\/pl\/post\/analiza-zdarzen-bezpieczenstwa-w-sycope-nsm","title":{"rendered":"Analiza zdarze\u0144 bezpiecze\u0144stwa w Sycope NSM"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_88 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Spis tre\u015bci<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.sycope.com\/pl\/post\/analiza-zdarzen-bezpieczenstwa-w-sycope-nsm\/#Etapy_reakcji_na_incydent\" >Etapy reakcji na incydent<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.sycope.com\/pl\/post\/analiza-zdarzen-bezpieczenstwa-w-sycope-nsm\/#Analiza_oparta_na_zdefiniowanych_dashboardach_sila_dashboardow\" >Analiza oparta na zdefiniowanych dashboardach (si\u0142a dashboard\u00f3w)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.sycope.com\/pl\/post\/analiza-zdarzen-bezpieczenstwa-w-sycope-nsm\/#Analiza_oparta_na_kategoriach_zagrozen_ATT_CK_MITRE\" >Analiza oparta na kategoriach zagro\u017ce\u0144 (ATT&amp;CK MITRE)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.sycope.com\/pl\/post\/analiza-zdarzen-bezpieczenstwa-w-sycope-nsm\/#Analiza_kontekstu_danych\" >Analiza kontekstu danych<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.sycope.com\/pl\/post\/analiza-zdarzen-bezpieczenstwa-w-sycope-nsm\/#Analiza_tabeli_alertow\" >Analiza tabeli alert\u00f3w<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.sycope.com\/pl\/post\/analiza-zdarzen-bezpieczenstwa-w-sycope-nsm\/#Podsumowanie\" >Podsumowanie<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Etapy_reakcji_na_incydent\"><\/span>Etapy reakcji na incydent<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Ka\u017cdy system klasy NDR powinien obejmowa\u0107 funkcjonalno\u015bci wspieraj\u0105ce proces obs\u0142ugi incydent\u00f3w \u2013 od wykrycia po reakcj\u0119 i zebranie dowod\u00f3w. Sycope zosta\u0142 zaprojektowany, aby obejmowa\u0107 wszystkie etapy procesu obs\u0142ugi incydentu bezpiecze\u0144stwa.<\/p>\n<figure id=\"attachment_1030\" aria-describedby=\"caption-attachment-1030\" style=\"width: 757px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1030\" src=\"https:\/\/sycope.com\/wp-content\/uploads\/2025\/05\/64d3ae6c2802227857cba0ea_Picture1.jpg\" alt=\"\" width=\"757\" height=\"309\" srcset=\"https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3ae6c2802227857cba0ea_Picture1.jpg 492w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3ae6c2802227857cba0ea_Picture1-300x123.jpg 300w\" sizes=\"auto, (max-width: 757px) 100vw, 757px\" \/><figcaption id=\"caption-attachment-1030\" class=\"wp-caption-text\">Ekran 1. Etapy reakcji na incydent<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p data-start=\"988\" data-end=\"1067\"><strong>Analiza anomalii sieciowych w Sycope mo\u017ce by\u0107 przeprowadzana na wiele sposob\u00f3w:<\/strong><\/p>\n<ul data-start=\"1069\" data-end=\"1251\">\n<li data-start=\"1069\" data-end=\"1137\">\n<p data-start=\"1071\" data-end=\"1137\">Analiza oparta na zdefiniowanych dashboardach (si\u0142a dashboard\u00f3w)<\/p>\n<\/li>\n<li data-start=\"1138\" data-end=\"1195\">\n<p data-start=\"1140\" data-end=\"1195\">Analiza oparta na kategoriach zagro\u017ce\u0144 (ATT&amp;CK MITRE)<\/p>\n<\/li>\n<li data-start=\"1196\" data-end=\"1224\">\n<p data-start=\"1198\" data-end=\"1224\">Analiza kontekstu danych<\/p>\n<\/li>\n<li data-start=\"1225\" data-end=\"1251\">\n<p data-start=\"1227\" data-end=\"1251\">Analiza tabeli alert\u00f3w<\/p>\n<\/li>\n<\/ul>\n<h3><\/h3>\n<h2><span class=\"ez-toc-section\" id=\"Analiza_oparta_na_zdefiniowanych_dashboardach_sila_dashboardow\"><\/span>Analiza oparta na zdefiniowanych dashboardach (si\u0142a dashboard\u00f3w)<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Ten typ analizy rozpoczyna si\u0119 od skupienia na wyr\u00f3\u017cniaj\u0105cych si\u0119 wska\u017anikach (piki, wysokie warto\u015bci, du\u017ce odchylenia, nietypowe kombinacje itp.) \u2013 na podstawie dashboardu Threats Analysis jeste\u015bmy w stanie analizowa\u0107 korelacje mi\u0119dzy adresami IP zwi\u0105zanymi z wykrytymi anomaliami lub zagro\u017ceniami. Pozwala to skoncentrowa\u0107 si\u0119 na hostach b\u0119d\u0105cych \u017ar\u00f3d\u0142em lub celem wielu anomalii \u2013 wi\u0119c wyzwalacze analityczne w tym przypadku kr\u0105\u017c\u0105 wok\u00f3\u0142 odchyle\u0144 danych na wykresach.<\/p>\n<figure id=\"attachment_1031\" aria-describedby=\"caption-attachment-1031\" style=\"width: 757px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1031\" src=\"https:\/\/sycope.com\/wp-content\/uploads\/2025\/05\/64d3b1e7bc34a9ff9b390b87_Picture2.png\" alt=\"\" width=\"757\" height=\"568\" srcset=\"https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3b1e7bc34a9ff9b390b87_Picture2.png 514w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3b1e7bc34a9ff9b390b87_Picture2-300x225.png 300w\" sizes=\"auto, (max-width: 757px) 100vw, 757px\" \/><figcaption id=\"caption-attachment-1031\" class=\"wp-caption-text\">Ekran 2. Analiza zagro\u017ce\u0144<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>Innym przyk\u0142adem s\u0105 dashboardy, kt\u00f3re uwypuklaj\u0105 korelacje pomi\u0119dzy adresami IP, grupami lub krajami \u2013 gdzie mo\u017cemy skupi\u0107 si\u0119 na nietypowej charakterystyce ruchu w kontek\u015bcie tych parametr\u00f3w.<\/p>\n<figure id=\"attachment_1032\" aria-describedby=\"caption-attachment-1032\" style=\"width: 757px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1032\" src=\"https:\/\/sycope.com\/wp-content\/uploads\/2025\/05\/64d3b2f4fd4bd8e741d47eb0_Rysunek3.png\" alt=\"\" width=\"757\" height=\"434\" srcset=\"https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3b2f4fd4bd8e741d47eb0_Rysunek3.png 602w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3b2f4fd4bd8e741d47eb0_Rysunek3-300x172.png 300w\" sizes=\"auto, (max-width: 757px) 100vw, 757px\" \/><figcaption id=\"caption-attachment-1032\" class=\"wp-caption-text\">Ekran 3. Korelacje grup<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>Szybka i efektywna analiza mo\u017cliwa jest dzi\u0119ki mo\u017cliwo\u015bci szybkiego przechodzenia mi\u0119dzy dashboardami (1), mo\u017cliwo\u015bci filtrowania po krytycznych polach (2) lub przej\u015bciu do tabeli ze zdarzeniami (3).<\/p>\n<figure id=\"attachment_1033\" aria-describedby=\"caption-attachment-1033\" style=\"width: 757px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1033\" src=\"https:\/\/sycope.com\/wp-content\/uploads\/2025\/05\/64d3b324fcc5ba2481df4bd8_rysunek4.png\" alt=\"\" width=\"757\" height=\"356\" srcset=\"https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3b324fcc5ba2481df4bd8_rysunek4.png 1377w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3b324fcc5ba2481df4bd8_rysunek4-300x141.png 300w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3b324fcc5ba2481df4bd8_rysunek4-1024x482.png 1024w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3b324fcc5ba2481df4bd8_rysunek4-768x361.png 768w\" sizes=\"auto, (max-width: 757px) 100vw, 757px\" \/><figcaption id=\"caption-attachment-1033\" class=\"wp-caption-text\">Ekran 4. Korelacje kraj\u00f3w<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>Najbardziej wyrazistym przypadkiem analizy typu top-down s\u0105 dashboardy dedykowane dla mened\u017cer\u00f3w, np. SOC &amp; KPIs. W ramach tych widok\u00f3w mo\u017cliwa jest analiza drill down po klikni\u0119ciu w konkretne warto\u015bci, co u\u0142atwia analiz\u0119 danych.<\/p>\n<figure id=\"attachment_1034\" aria-describedby=\"caption-attachment-1034\" style=\"width: 757px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1034\" src=\"https:\/\/sycope.com\/wp-content\/uploads\/2025\/05\/64d3b38afd4bd8e741d50c4b_SOC-KPIs.png\" alt=\"\" width=\"757\" height=\"366\" srcset=\"https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3b38afd4bd8e741d50c4b_SOC-KPIs.png 1376w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3b38afd4bd8e741d50c4b_SOC-KPIs-300x145.png 300w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3b38afd4bd8e741d50c4b_SOC-KPIs-1024x495.png 1024w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3b38afd4bd8e741d50c4b_SOC-KPIs-768x371.png 768w\" sizes=\"auto, (max-width: 757px) 100vw, 757px\" \/><figcaption id=\"caption-attachment-1034\" class=\"wp-caption-text\">Ekran 5. SOC &amp; KPIs<\/figcaption><\/figure>\n<h3><\/h3>\n<h2><span class=\"ez-toc-section\" id=\"Analiza_oparta_na_kategoriach_zagrozen_ATT_CK_MITRE\"><\/span>Analiza oparta na kategoriach zagro\u017ce\u0144 (ATT&amp;CK MITRE)<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Alerty Sycope s\u0105 powi\u0105zane z ATT&amp;CK (baza wiedzy o taktykach i technikach), co sprawia, \u017ce szeroki zakres zagro\u017ce\u0144 wykrywanych w Sycope jest zgodny z nazewnictwem najpopularniejszego s\u0142ownika zagro\u017ce\u0144 i zmniejsza ryzyko b\u0142\u0119dnej interpretacji zagro\u017ce\u0144.<\/p>\n<figure id=\"attachment_1035\" aria-describedby=\"caption-attachment-1035\" style=\"width: 757px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1035\" src=\"https:\/\/sycope.com\/wp-content\/uploads\/2025\/05\/64d3b44ef7323ae56ece16bf_KPIs.png\" alt=\"\" width=\"757\" height=\"747\" srcset=\"https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3b44ef7323ae56ece16bf_KPIs.png 602w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3b44ef7323ae56ece16bf_KPIs-300x296.png 300w\" sizes=\"auto, (max-width: 757px) 100vw, 757px\" \/><figcaption id=\"caption-attachment-1035\" class=\"wp-caption-text\">Ekran 6. KPIs<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>Tego typu analiza pozwala skupi\u0107 si\u0119 na konkretnych taktykach lub technikach, np. exfiltration. Dzi\u0119ki temu analityk mo\u017ce odfiltrowa\u0107 pozosta\u0142e zagro\u017cenia, co skutkuje bardziej czyteln\u0105 analiz\u0105 danych.<\/p>\n<figure id=\"attachment_1036\" aria-describedby=\"caption-attachment-1036\" style=\"width: 757px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1036\" src=\"https:\/\/sycope.com\/wp-content\/uploads\/2025\/05\/64d3b48f0cf8144598e5c49e_Filtering-by-tactics-and-techniques.png\" alt=\"\" width=\"757\" height=\"382\" srcset=\"https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3b48f0cf8144598e5c49e_Filtering-by-tactics-and-techniques.png 602w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d3b48f0cf8144598e5c49e_Filtering-by-tactics-and-techniques-300x151.png 300w\" sizes=\"auto, (max-width: 757px) 100vw, 757px\" \/><figcaption id=\"caption-attachment-1036\" class=\"wp-caption-text\">Ekran 7. Filtrowanie po taktykach i technikach mo\u017cliwe jest w niemal wszystkich dashboardach bezpiecze\u0144stwa<\/figcaption><\/figure>\n<h2><\/h2>\n<h2><span class=\"ez-toc-section\" id=\"Analiza_kontekstu_danych\"><\/span>Analiza kontekstu danych<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Analiza kontekstu danych mo\u017cliwa jest dzi\u0119ki funkcjom filtrowania danych, w tym ulubionym filtrom i tagom. Ulubione filtry pozwalaj\u0105 na szybk\u0105 analiz\u0119 zagro\u017ce\u0144 w kontek\u015bcie, ale tak\u017ce wspieraj\u0105 proces polowania na zagro\u017cenia. Na przyk\u0142ad, spo\u015br\u00f3d wielu zagro\u017ce\u0144 mo\u017cna nada\u0107 priorytet zagro\u017ceniom zewn\u0119trznym lub wewn\u0119trznym.<\/p>\n<figure id=\"attachment_1037\" aria-describedby=\"caption-attachment-1037\" style=\"width: 757px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1037\" src=\"https:\/\/sycope.com\/wp-content\/uploads\/2025\/05\/64d4c3cb9a77a9c95396d403_Rysunek-8-Favorite-filters-External-Threats-Internal-Threats.png\" alt=\"\" width=\"757\" height=\"323\" srcset=\"https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d4c3cb9a77a9c95396d403_Rysunek-8-Favorite-filters-External-Threats-Internal-Threats.png 602w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d4c3cb9a77a9c95396d403_Rysunek-8-Favorite-filters-External-Threats-Internal-Threats-300x128.png 300w\" sizes=\"auto, (max-width: 757px) 100vw, 757px\" \/><figcaption id=\"caption-attachment-1037\" class=\"wp-caption-text\">Ekran 8. Ulubione filtry (External Threats, Internal Threats)<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<p>Innym przyk\u0142adem analizy kontekstowej mo\u017ce by\u0107 wyszukiwanie zagro\u017ce\u0144 oznaczonych tagiem CTI (Cyber Threat Intelligence). Tego typu zdarzenia koreluj\u0105 z zagro\u017ceniami wykrytymi na podstawie IoC (Indicators of Compromise), takimi jak IP, Hostname\u2019y czy Hash\u2019e z kategorii Malware, Spam, Scanner, Phishing, TOR, Proxy i Cryptomining. Threat Intelligence to bardzo istotny element architektury mechanizmu wykrywania zagro\u017ce\u0144 w systemie monitoringu bezpiecze\u0144stwa Sycope.<\/p>\n<figure id=\"attachment_1038\" aria-describedby=\"caption-attachment-1038\" style=\"width: 757px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1038\" src=\"https:\/\/sycope.com\/wp-content\/uploads\/2025\/05\/64d4c3dccaa5fa685f67e016_Rysunek-9-Favorite-filters-CTI-Alerts.png\" alt=\"\" width=\"757\" height=\"303\" srcset=\"https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d4c3dccaa5fa685f67e016_Rysunek-9-Favorite-filters-CTI-Alerts.png 1376w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d4c3dccaa5fa685f67e016_Rysunek-9-Favorite-filters-CTI-Alerts-300x120.png 300w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d4c3dccaa5fa685f67e016_Rysunek-9-Favorite-filters-CTI-Alerts-1024x410.png 1024w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d4c3dccaa5fa685f67e016_Rysunek-9-Favorite-filters-CTI-Alerts-768x308.png 768w\" sizes=\"auto, (max-width: 757px) 100vw, 757px\" \/><figcaption id=\"caption-attachment-1038\" class=\"wp-caption-text\">Ekran 9. Ulubione filtry (CTI Alerts)<\/figcaption><\/figure>\n<p>Filtrowanie alert\u00f3w po tagach umo\u017cliwia analitykom bezpiecze\u0144stwa i threat hunterom szybkie dotarcie do konkretnych zdarze\u0144.<\/p>\n<figure id=\"attachment_1039\" aria-describedby=\"caption-attachment-1039\" style=\"width: 757px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1039\" src=\"https:\/\/sycope.com\/wp-content\/uploads\/2025\/05\/64d4c3ea3c89752ea6bc9c88_Alerts-Map.png\" alt=\"\" width=\"757\" height=\"377\" srcset=\"https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d4c3ea3c89752ea6bc9c88_Alerts-Map.png 602w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d4c3ea3c89752ea6bc9c88_Alerts-Map-300x150.png 300w\" sizes=\"auto, (max-width: 757px) 100vw, 757px\" \/><figcaption id=\"caption-attachment-1039\" class=\"wp-caption-text\">Ekran 10. Mapy alert\u00f3w<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Analiza_tabeli_alertow\"><\/span>Analiza tabeli alert\u00f3w<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Analiza zdarze\u0144 w tabeli alert\u00f3w opr\u00f3cz obs\u0142ugi alert\u00f3w za pomoc\u0105 flag ACK lub False Positive pozwala na podgl\u0105d wszystkich oryginalnych danych (raw), kt\u00f3re spowodowa\u0142y wygenerowanie danego alertu.<\/p>\n<figure id=\"attachment_1040\" aria-describedby=\"caption-attachment-1040\" style=\"width: 757px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-1040\" src=\"https:\/\/sycope.com\/wp-content\/uploads\/2025\/05\/64d4c3fa28d3c17d72a9433e_11-Alerts-table.png\" alt=\"\" width=\"757\" height=\"456\" srcset=\"https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d4c3fa28d3c17d72a9433e_11-Alerts-table.png 602w, https:\/\/www.sycope.com\/wp-content\/uploads\/2025\/05\/64d4c3fa28d3c17d72a9433e_11-Alerts-table-300x181.png 300w\" sizes=\"auto, (max-width: 757px) 100vw, 757px\" \/><figcaption id=\"caption-attachment-1040\" class=\"wp-caption-text\">Ekran 11. Tabela alert\u00f3w<\/figcaption><\/figure>\n<p>&nbsp;<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Podsumowanie\"><\/span>Podsumowanie<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p data-start=\"4553\" data-end=\"4878\">Mo\u017cliwo\u015b\u0107 \u015bledzenia podejrzanej aktywno\u015bci za pomoc\u0105 elastycznych dashboard\u00f3w z wieloma funkcjami wspieraj\u0105cymi analiz\u0119 danych sprawia, \u017ce praca z systemem jest efektywna, szybka i przyjemna dla ka\u017cdego u\u017cytkownika systemu, niezale\u017cnie od tego, czy jest to do\u015bwiadczony in\u017cynier bezpiecze\u0144stwa, czy pocz\u0105tkuj\u0105cy analityk SOC.<\/p>\n<p data-start=\"4880\" data-end=\"5072\" data-is-last-node=\"\" data-is-only-node=\"\">Dzi\u0119ki przemy\u015blanej architekturze systemu Sycope obs\u0142uga incydent\u00f3w jest prosta, a jednocze\u015bnie mo\u017cliwo\u015bci g\u0142\u0119bokiej analizy s\u0105 bardzo szerokie, co czyni go kluczowym systemem dla ka\u017cdego SOC.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Etapy reakcji na incydent Ka\u017cdy system klasy NDR powinien obejmowa\u0107 funkcjonalno\u015bci wspieraj\u0105ce proces obs\u0142ugi incydent\u00f3w \u2013 od wykrycia po reakcj\u0119 i zebranie dowod\u00f3w. Sycope zosta\u0142 zaprojektowany, aby obejmowa\u0107 wszystkie etapy procesu obs\u0142ugi incydentu bezpiecze\u0144stwa. &nbsp; Analiza anomalii sieciowych w Sycope mo\u017ce by\u0107 przeprowadzana na wiele sposob\u00f3w: Analiza oparta na zdefiniowanych dashboardach (si\u0142a dashboard\u00f3w) Analiza oparta [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":1397,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[99],"tags":[138,145,115,146,130],"product":[165],"topic":[167,168],"sycope_author":[251],"class_list":["post-1755","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-anomalie-sieciowe","tag-mitre-attck-pl","tag-skanowanie-sieci","tag-soc-pl","tag-wykrywanie-zagrozen","product-security-pl","topic-bezpieczenstwo-sieci","topic-monitorowanie-i-analiza-sieci","sycope_author-pawel-drzewiecki"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.sycope.com\/pl\/wp-json\/wp\/v2\/posts\/1755","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sycope.com\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sycope.com\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sycope.com\/pl\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sycope.com\/pl\/wp-json\/wp\/v2\/comments?post=1755"}],"version-history":[{"count":3,"href":"https:\/\/www.sycope.com\/pl\/wp-json\/wp\/v2\/posts\/1755\/revisions"}],"predecessor-version":[{"id":2125,"href":"https:\/\/www.sycope.com\/pl\/wp-json\/wp\/v2\/posts\/1755\/revisions\/2125"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sycope.com\/pl\/wp-json\/wp\/v2\/media\/1397"}],"wp:attachment":[{"href":"https:\/\/www.sycope.com\/pl\/wp-json\/wp\/v2\/media?parent=1755"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sycope.com\/pl\/wp-json\/wp\/v2\/categories?post=1755"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sycope.com\/pl\/wp-json\/wp\/v2\/tags?post=1755"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.sycope.com\/pl\/wp-json\/wp\/v2\/product?post=1755"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.sycope.com\/pl\/wp-json\/wp\/v2\/topic?post=1755"},{"taxonomy":"sycope_author","embeddable":true,"href":"https:\/\/www.sycope.com\/pl\/wp-json\/wp\/v2\/sycope_author?post=1755"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}