In this age where cloud solutions and endpoint security are at the forefront of cyber security discussions, it’s easy to overlook the critical role played by traditional appliance-based security devices, restricted on-premises environments, and legacy compute systems.

These diverse sources generate a wealth of data that is crucial for thorough security analysis, the Security Log Analytics service offers a solution that embraces both the new and the old, ensuring attacker Techniques, Tools & Procedures (TTPs) can be detected across disparate IT and security assets.

Utilising either our in-house developed SOC platform or a supported 3rd party XDR platform / SIEM (e.g. Microsoft Sentinel), we can detect subtle signals of attack activity that might otherwise go unnoticed and offer a holistic view of your entire security posture.

At the core of our service is the commitment to optimise the cost of log ingestion and analysis, we provide options to deploy both virtual and physical log collector appliances that can collect, normalise, and transmit data to the chosen log analytics platform. The calculation for log ingestion charges excludes any data from services already included for the Threat Detection & Response service portfolio (e.g. Modern Workplace Protection, Endpoint Detection & Response).

Log forwarding appliances are configured to maintain the integrity and confidentiality of the data being transmitted and we ensure that the processing methodologies adhere to compliance and regulatory requirements that often govern legacy and on-premises systems, ensuring that legal and procedural standards are met