Log monitoring

Log file monitoring is the process of collecting and observing log files from operations with your network. These data files provide detailed information from operating systems, servers and applications, and enable organizations to effectively monitor devices across their network.

These log files could come from many different sources, including:

• Security logs
• Office 365 user activity logs
• Domain Name System (DNS) logs
• Application logs
• System logs
• And many more

Log monitoring is also known as Security Information and Event Management (SIEM) technology. SIEM platforms, such as the one included in Defense.com™, enables your business to collect, observe, filter and analyze log files to detect malicious activity inside your network.

Unlike other vendors on the market, with Defense.com™ there is no limit on the number of logs you send to us. The only limitation is the number of log sources you are looking to monitor, which means you don’t need to worry about log counts.

This makes Defense.com™ a scalable SIEM solution for your business, as opposed to other traditional SIEM vendors with pricing based on log volumes.

As standard we provide up to 90 days of logs for immediate searching via your Defense.com™ account and up to 12 months offline. All logs are stored in a forensically-compliant manner.

We can also cater for any particular requirements that your business has, such as the retention of logs for regulatory compliance purposes.

We deliver log monitoring as part of a wider Managed SIEM service, delivered through the Defense.com™ dashboard.

Our team of trained SOC analysts will provide 24/7 threat monitoring, proactively investigate any risks, and notify you if there is a security event.