Another test that is as important as dynamically subjecting the application to security testing is the Static Source Code Analysis tests. Through analysis of source codes, it’s made easier to detect some vulnerabilities that cannot be detected in dynamic tests. GAIS Security team performs source code analysis with great care according to the language in which it is coded in order to statically examine the applications developed within the organization and to prevent security vulnerabilities.

In performing the analysis, codes are analyzed according to secure code development and various code performance criteria and reported together with solution recommendations.

Computer Forensics Service is a set of actions for examination of all kinds of data from sound, image, data, information or combination that are kept or transmitted in electromagnetic and electro-optical environments and providing answers to the requested questions with evidence, in line with the requests made by the institutions.

Computer Forensics is basically formed of 4 stages:

1. First Response: It consists of determining the digital evidence that will illuminate the incident and ensuring the security of these systems.

2. Obtaining Forensic Copies: It consists of taking images of systems accepted as digital evidence using write protection methods to use in examination.

3. Examination: It consists of technical examinations carried out to search for answers to the questions asked using methods and software accepted in the literature on the Forensic Copies obtained.

4. Reporting: It consists of reporting the findings and the details of the findings in an understandable manner. Additionally, the suggestions that include the measures to be taken to prevent the events that are requested to be investigated by the institutions and the like are added to the report created as a result of this process

Load Test is a subset of the Performance Test where we simulate multiple users accessing the application at the same time and test the response of the system under varying load conditions. This test aims to measure the scalability in addition to the speed and capacity of the application.

GAIS customers can request malware analysis service to reveal the purpose and methods of use of suspicious files that are suspected to be malware or that have emerged during case analysis.

After taking a sample of the suspicious files, GAIS analysts perform static and dynamic analysis of the relevant files in malware analysis laboratories, providing a report detailing the contents of the suspicious files and meeting the information needs of the customer.

Related malware analysis report contains:

• Local and network activities carried out by the malware.

• Details of the remote management mechanism used by attackers

• Domains, servers and mail addresses used for communication, if any

• Launch, infection techniques of the malware

• Intelligence survey on the existence of links with existing APT groups

Cyber ​​Threat Intelligence Analysts within GAIS Security collect and process intelligence in demands, requirements of the organization and critical areas identified in order to take pro-active security to a higher level. The operations performed by the Cyber ​​Threat Intelligence team are as follows.

• As part of Cyber ​​Threat Intelligence, it profiles threat actors (APT groups and other threat groups) worldwide and collects cyber intelligence. According to the risk factors determined specific to the institution, it is determined whether the incoming intelligence and profiled groups pose a threat to the institution or not.

• Our Cyber ​​Threat Intelligence analysts tracks and monitors corporate keywords on social media. Thus, social media security of institutions and authorized persons are taken under control, and unwanted incidents are prevented.