Threat Monitoring and Threat Response¶
Threat Monitoring from UKFast is our tailored, all in one HIDS/SIEM system that enables you to continually monitor for malicious activity on your IT environment. Collating and parsing logs from critical services like SSH, RDP and web traffic, Threat Monitoring can hunt down and block attackers automatically, while providing you with real-time alerts of threat activity.
Threat Response is an additional service which provides managed support by our in-house security team, pro-actively looking into all your alerts and applying and remediation as needed. Additionally, our Threat Response team is more than happy to work with you to provide additions tips on how to further secure your servers, with your solutions and needs in mind.
- General Information and FAQs
- How does it work?
- System Requirements
- Getting Started
- Installing on a UKFast hosted server
- Installing on a non-UKFast hosted server
- PCI DSS Compliance
- Alerts and rulesets
- Attack Ruleset
- High Level Alerts Explained
- Alert Remediation Tips
- Common Attacks
- Databases
- Exploits
- File Monitoring (FIM)
- Malware
- Service Specific Alerts
- System
- Windows
- Scans and Reconnaissance