Our platform is to use the big data as the core technology, then collect and preserve all the log data as well as compressed and signed it . We can also integrate with BI report software to enhance the visualization of internal information. In addition, we can automatically forward log data to the threat analysis platform according to the customers’ needs. The main functions of our platform is SIEM, intrusion analysis, behavior monitoring, vulnerability assessment and automation updated threat intelligence database. Nevertheless, we integrate an AI analysis module for continually monitoring the internal environment as well as to enhance the accuracy of the event. We provide correlation rule for any emergency event so the SOC staffs will know immediately and solve the problem in real time. It will effectively enhance a better monitoring for the internal environment. Furthermore, we also integrate the occurring alert and the incident response into the same platform. For speeding up the process time, our platform corresponds with APP, so that the SOC staffs wouldn’t missed any alert messages. When the system match any information of new malicious IP/URL , It will automatically trigger our anti blacklist mechanism to block the attackers. When major incidents need to report and process immediately, It also be strained through incident report and forensic analysis functions. Billows All-In-One SOC is a comprehensive solution that integrates all the information security audits, compliances regulatory and automated processing for you to easily manage your internal information security monitoring.