{"id":2089,"date":"2020-09-24T13:33:41","date_gmt":"2020-09-24T17:33:41","guid":{"rendered":"https:\/\/seaglasstech.wpenginepowered.com\/?page_id=2089"},"modified":"2026-01-23T13:48:47","modified_gmt":"2026-01-23T18:48:47","slug":"seaglass-hunt","status":"publish","type":"page","link":"https:\/\/seaglasstechnology.com\/seaglass-hunt\/","title":{"rendered":"SeaGlass Hunt"},"content":{"rendered":"

\"seaglass-hunt-service-page-photo\"<\/p>\n

Is your data secure?<\/center>
\n
Have you had a cyber breach?<\/center>
\n
Who is lurking on your network?<\/center><\/p>\n

What Is SeaGlass Hunt?<\/h2>\n

SeaGlass Hunt is a process that we can implement to enhance your initial network & security scan. Being able to identify security vulnerabilities and weaknesses within networks, will give your organization the ability to resolve security risks that could lead to data breaches and attacks. Our SeaGlass Hunt service offers 3 critical components:<\/p>\n

The SeaGlass Sensor<\/h3>\n

The SeaGlass Sensor is a device that is configured and shipped onsite to your premises and collects the necessary data for analysis.<\/p>\n

The Analysis Process<\/h3>\n

After a few days of information gathering, our SeaGlass Hunt device and the data are sent back to SeaGlass headquarters where it is downloaded and analyzed using a variety of tools and techniques. The analysis process complements the initial network scan from tools to better assess not only a snapshot of your network’s state, but an in-depth look at the data, its type, and how it moves through your network. <\/p>\n

In particular, we look at beaconing or long connection type traffic which would potentially indicate an intruder exfiltrating data. The data is also run through RITA for beacon analysis and SecOnion<\/a> for Suricata\/Snort analysis. As information is gathered, a passer with timestamps is used to attempt to validate any beacon traffic noted.<\/p>\n

Report Of Findings To The Client<\/h3>\n

Our report includes what was found, what data was potentially able to be legitimized, as well as what could not be legitimized and should be looked into further. The first assessment should be viewed as a chance to review, understand, potentially clean up, and filter out traffic for future analysis. The best use of this type of work is to run at minimum, biannual assessments as well as post-cleanup assessments to measure and validate changes made or intrusions stopped. <\/p>\n

It is anticipated that each subsequent assessment will be faster since the previous assessments allow for the validating or cleaning up of noise. This will also allow for a clearer picture to ultimately pull potential traffic anomalies out faster for investigation and make the environment more actionable and less noisy.<\/p>\n

The Entire SeaGlass Hunt Process Helps Us:<\/h2>\n