Zyston Remote Workforce Monitoring
Zyston is providing a lightweight monitoring offering to monitor key assets like Office 365, VPN, and Zoom that may be at risk during the COVID-19 outbreak.
Key Deliverables
Alert Notification Ticket
Remediation Recommendations
Weekly Executive Summary
VPN Monitoring – Use Cases
Operational
-
-
- Multiple failed logon attempts in 60 minutes
- Attempted connection from adversarial country
- Session lasting over 24 hours
-
Security
-
-
- Unique connections by user per day
- Behavior deviations
- Active connections
- Percentage of failed logons
- Connection details (establishment/disconnection)
- Number of successful logons in the last 6 hours
-
VPN Monitoring – Office 365
Operational
-
-
- Multiple failed logon attempts
- Impossible travel login detected
- Activity from infrequent country
- Suspicious inbox manipulation
- Mass Sharepoint file deletion
- Suspicious inbox forwarding
- Click permitted to high-risk URL
- Activity form anonymous proxy IP
-
