Orange County NC Website
Browse       Search
Orange County August 8, 2024 <br />ASTRO 25 Managed Detection and Response 24-177976 / Cybersecurity Services <br />Solution Description <br /> <br />Use or disclosure of this proposal is subject to the restrictions on the cover page. <br />Motorola Solutions Confidential Restricted <br /> <br />Page 1-3 <br /> <br />Figure 1-1: ActiveEye Interface <br />Dashboard <br />Key information in the ActiveEye Portal is summarized on the dashboard. This dashboard provides <br />details about open alerts, an overview of alert categories, alert processing , key performance indicators <br />(KPI), open security cases, and recent threat advisories. Also, users can access more in-depth <br />information like security cases, alert details, alert trends, reports, and group communications. <br />Security Cases <br />When the Customer and Motorola Solutions identify a threat, the SOC will create a security case. <br />Through the ActiveEye Portal, the Customer can view details of current or past cases, create new <br />cases, or respond to ongoing cases. <br />Alert Details and Trends <br />Alerts can be evidence of a past, active, or developing threat. ActiveEye records relevant data for each <br />alert, enabling users to quickly view its triggers, systems it impacts, and any actions taken to address <br />the alert. ActiveEye Portal also provides tools for reviewing groups of alerts based on key attributes or <br />time periods. Attribute filters enable users to toggle which alert groups ActiveEye Portal shows, helping <br />to spot trends or threat activity. Users can also compare alert logs for specific time periods to determine <br />if specific trends are associated with a threat or are false positives. <br />Investigations and Reporting <br />ActiveEye Portal includes robust ad hoc reporting capabilities, which will provide important, additional <br />information about active and historical threats. Users can share information outside of ActiveEye Portal <br />by downloading reports in .csv or .json format. <br />In addition to ad hoc reporting, ActiveEye Portal can provide a daily email summary and monthly report. <br />Daily email summaries can include alert counts, security cases opened or closed, saved queries that <br />have new data, and detailed endpoint security statistics. If needed, ActiveEye Portal can send one or <br />more summary emails with different content for differe nt groups. Monthly reports are available as a <br />PDF download. <br />Docusign Envelope ID: AD07CE02-1F94-4496-ABD0-D61F9CBE562C