Log and Event Management
Log management focuses on the collection and analysis of network and system logs. These logs provide first indication of anomalous activity. We can collect, analyze and monitor your logs.
E2ECYBER’s staff have more than 20 years of specialized hands-on experience implementing, monitoring and analyzing various logs.
Why is it important?
Logs capture system or network activity. Logs need to be collected and reviewed to identify unusual activity. Once such activity is suspected, lots need to be analyzed and correlated in further detail.
What are the benefits?
As part of Managed Security Services, our log management solution offers the following benefits:
- Using E2ECYBER’s extensive expertise to monitor and review your logs
- Our staff will review and analyze any anomalous activity
- Our services are less costly than hiring full-time staff as all log management can be done remotely
What are our offerings?
Our passive log management service includes the following:
- Collection: We will install a log collector on you network to collect logs from one or more devices.
- One-Site/Remote: Our analysts will either connect securely to the collector, or the logs will automatically be encrypted and transferred into our secure facility.
- Monitoring: Our analysts will monitor and review your logs.
- Analysis: Any suspicious activity will be thoroughly analyzed.
- Escalation: Complex incidents will be escalated to our advanced security experts.
- Notification: As agreed, we will notify you and will advice further actions.
Our active log management service includes the following:
- Collection: We will install a log collector on you network to collect logs from one or more devices.
- One-Site/Remote: Our analysts will either connect securely to the collector, or the logs will automatically be encrypted and transferred into our secure facility.
- Monitoring: Our analysts will monitor and review your logs.
- Analysis: Any suspicious activity will be thoroughly analyzed.
- Escalation: Complex incidents will be escalated to our advanced security experts.
- Notification: As agreed, we will notify you and will advice further actions.
- Action: As agreed, we may be able to take further action to stop this malicious activity.
This service augments the active log management service by automatically analyzing and correlating different events to eliminate false positives. For this, rather than install a simple log collection application, our experts will install and configure a Security Incident and Event Management (SIEM) solution that provides enhanced monitoring and event correlation services.