Orange County NC Website
DocuSign Envelope ID:OADE138B-093C-4937-85B5-78AC72BBFDD6 <br /> Appendix 1 : Service Descriptions <br /> 7.7 Emergency Incident Response Services <br /> During the Services Term, Secureworks agrees to provide Emergency Incident Response Services to <br /> Customer. These services can be provided remotely or onsite. <br /> The activities to be performed may include, but are not limited to: <br /> • Incident support and coordination <br /> • Digital media handling guidance and support <br /> • Deployment support of host-based, network-based, and log analysis technologies <br /> • Network testing services <br /> • Incident Response analysis for on-premise and cloud infrastructure <br /> — Host-based <br /> — Network-based <br /> — Malicious code <br /> — Logs <br /> — Threat intelligence analysis <br /> • Remediation planning guidance <br /> 7.7.1 Digital Forensic Analysis Services <br /> As part of Emergency Incident Response Services, Secureworks may acquire and analyze a variety of <br /> formats for forensic analysis and data recovery, including but not limited to: <br /> • Disk drives <br /> • RAID systems <br /> • Portable storage drives <br /> • Mobile devices <br /> • Network packet captures <br /> • Cleartext log files <br /> 7.7.2 Malware Analysis and Reverse Engineering Services <br /> As part of Emergency Incident Response Services, Secureworks may perform static, dynamic, and <br /> reverse engineering analysis to assist in understanding the function of Customer-supplied files. <br /> Secureworks will provide analysis results, to include cyber threat intelligence based on correlation across <br /> Secureworks datasets, and will advise on mitigation actions to reduce the impact of the sample on <br /> Customer infrastructure. <br /> Appendix 2: Additional Scoping Detail <br /> 8 Additional Scoping Detail <br /> The following criteria has been provided by Customer to derive scope and pricing described within this <br /> Statement of Work. Secureworks will deliver the services described herein according to the following. <br /> Classification://Secureworks/Confidential -Limited External Distribution: <br /> //Secureworks/Confidential- Limited External Distribution <br />