Cybersecurity
Cybersecurity Services
Sola.com's cybersecurity practice delivers malware analysis, incident response, vulnerability assessment and penetration testing, security monitoring, and training. What we learn about adversary infrastructure through our threat intelligence feeds into detection and response.
All work is limited to systems our clients own or operate, and to scopes for which we hold written authorization.
Services
What we do
01 / Malware Analysis
Malware Analysis
Samples are analyzed in our own isolated environment to identify command-and-control endpoints, persistence techniques and targeted data. Results are packaged as IOCs and detection rules and handed to monitoring and response.
- Static and dynamic analysis, C2 extraction
- IOCs (hashes, domains, IPs) and detection rules
- Scoping of compromise and response prioritization
02 / Incident Response
Incident Response
We investigate indicators of data leakage, identify and remediate infected hosts, examine insider exfiltration, support recovery from social-media account takeovers, and preserve evidence for legal action.
- Data leakage response (malware infection and insider exfiltration)
- Social-media account takeover response (impact and root-cause analysis, prevention)
- Digital forensics (device and account evidence, at the owner's request or under legal process)
03 / Vulnerability Assessment & Penetration Testing
Vulnerability Assessment & Penetration Testing
With the client's authorization, we examine web applications, servers and network devices from an attacker's perspective and report the weaknesses found together with remediation.
- Web application, server and network assessment
- Penetration testing
- Reporting and re-testing
04 / Security Monitoring
Security Monitoring
From IDS/IPS and WAF deployment to 24/7 monitoring and operations. Detected events are correlated with our threat intelligence to reduce false positives.
- IDS/IPS monitoring and operations
- WAF monitoring and operations
05 / Training
Security Training
Training for new hires through experienced staff, covering cybersecurity fundamentals and current attack techniques, delivered remotely or on site.
- Remote training (streamed)
- On-site training
Tracking of adversary infrastructure and our published research are on Threat Intelligence & Research. Narrative and diffusion analysis on social media (responding to cognitive warfare and influence operations) and our analysis platform Omni Oculus are on Information Environment Analysis.
Threat Intelligence & Research
Threat Intelligence & Research
Tracking of adversary infrastructure targeting Japan, and the research articles and advisories we publish under Sola.com's name, are collected on our Threat Intelligence & Research page. Recent publications:
- 2026-10-24 · Threat ResearchTracking NAVER-impersonating phishing infrastructure, 2022–2026: assessing Kimsuky involvement (Japanese; English edition in preparation)
- 2026-08-22 · Research SeriesOVERRIDE 2022 — cyberattacks and the Japanese-language information space around the invasion of Ukraine (three parts, Japanese)
- 2026-07-26 · LandscapeReading South Korea's cybersecurity ecosystem: KISA, KrCERT/CC, AhnLab, ESRC (Japanese)