Isadak strengthens login security and Entra sync visibility with Log360 Cloud

Business challenges

• Unexplained account lockouts: Employees signing in from multiple devices were repeatedly entering incorrect passwords, locking themselves out of their office accounts. Without visibility into login activity, the IT team had no way to confirm that these lockouts were accidental rather than malicious, or to trace their root cause.
• Microsoft Entra Connect sync failures: Password resets and newly created user accounts were not consistently reflecting in Microsoft Office, and the team lacked a reliable way to tell whether the Entra Connect sync was running or had silently disconnected.
• No centralized log visibility: As a first-time SIEM adopter, Isadak had no automated mechanism to collect, visualize, and alert on user login activity and source details from a single place.

The problem

Before implementing Log360 Cloud, Isadak's most persistent IT issue was from everyday user behavior rather than any deliberate attack. With staff accessing their accounts across several devices, mistyped passwords were common, and the resulting lockouts disrupted users without any clear explanation. The IT team had no way to confirm whether the lockouts were accidental or the sign of something malicious, and no centralized view of login activity to investigate the root cause.

Adding to the complexity, an identity synchronization issue proved even harder to diagnose. Changes made in Microsoft Entra ID were not always propagating to Microsoft Office. Even after the team reset passwords or created new users, those changes failed to appear, with no clear indication of whether the underlying Entra Connect sync was running or had silently disconnected. With no automated solution in place to surface either issue, the team needed centralized visibility into both login activity and sync health before they could regain control.

The solution

Isadak deployed ManageEngine Log360 Cloud as its first dedicated SIEM solution, centralizing audit logs into a single dashboard. Failed login monitoring became the team's primary use case, giving them the source-level detail they had lacked and an early-warning signal for potential DDoS activity. The platform also resolved their identity-sync blind spot, letting them confirm at any moment whether Entra Connect was running or had disconnected.

Real-time alerting proved its value when genuinely suspicious activity surfaced. In one instance, Log360 Cloud's correlation rules flagged a single account signing in from two different geographic locations within a short window.

Beyond detection, Log360 Cloud streamlined compliance work with ready-to-use failed login and user audit reports, and live chat and call support resolved queries within minutes. Both respondents rated their experience 9 and 10 out of 10 and were highly likely to recommend Log360 Cloud.

About Log360 Cloud

ManageEngine Log360 Cloud, a unified cloud SIEM solution with integrated CASB capabilities, helps enterprises secure their network from cyberattacks. With its security analytics, threat intelligence, and incident management capabilities, Log360 Cloud helps security analysts spot, prioritize, and resolve threats in both on-premises and cloud environments. The solution is highly scalable and helps drive down infrastructure and storage costs. For more information about Log360 Cloud, visit manageengine.com/cloud-siem.