Tools

The CCN-CERT makes its common and shared tools available to the public sector, among which the following stand out:

Incident management tool and interaction with CCN-CERT for incident handling.

Agent for user workstations and servers to protect against ransomware infection. Vaccination.

Early Warning System for real-time detection of threats and incidents in the Agency's traffic.

APT analysis and exfiltration of information, with the possibility of deploying the CLAUDIA agent.

To guarantee a higher level of security, the National Cryptologic Centre recommends that organizations have the following solutions:

EDR tool from the catalogue for workplace protection.

Review systems and applications for security status.

CPSTIC catalogue / GLORIA / MÓNICA / Distributed SAT: SIEM capacity for log collection, normalization, correlation and storage.

Backup system and verification of its operation.