Proactive security monitoring: Log360 helps detect failed logons for Helsingin aikuisopisto

Helsingin aikuisopisto's security challenges

As an educational institute, Helsingin faced cybersecurity challenges arising from phishing attacks, social engineering attempts, insider threats, and its BYOD policy. These challenges are exacerbated by limited IT resources and the valuable information the organization handles. To address these challenges, Helsingin required a SIEM solution that could provide centralized log management, network activity monitoring, threat detection and mitigation, real-time security alerts, and compliance reports for auditing requirements.

The solution: Log360

Hamid Mortazavi, CIO at Helsingin, chose ManageEngine Log360 over the institution's previous SIEM solution after having problems with deployment, plus an expensive and complicated training and implementation experience. The institution sought a SIEM solution that could help with privilege abuse or misuse, solve access monitoring issues, and track the failed logons and authentications from malicious sources.

ManageEngine's Log360 helped Mortzavi and his team solve for all their use cases, and the solution was also easy to deploy and use. They were able to easily monitor logon failures with Log360's real-time alerts and reports. Log360 provided Helsingin with granular details on failed logon attempts, including information on the attempts that failed due to a bad password or an unknown username.

Besides providing improved behavior monitoring, Log360 helped the IT team at Helsingin with security analytics, widgets, and dashboards. By consolidating all the security data points into a single console, tracking was made easier. Moreover, the solution's advanced threat analytics and ML-based anomaly detection capabilities helped the team to spot security threats in real time and remediate them quickly. Log360 also helped Helsingin adhere to regulatory mandates like the GDPR with its predefined compliance report templates and violation alerts.

Impact

Helsingin aikuisopisto found Log360 to be a powerful, user-friendly solution with cost-effective cybersecurity capabilities. The staff was also pleased with the technical support team at ManageEngine, who helped with all their security-related queries. The solution has become an integral part of the organization's cybersecurity operation.

Key features of Log360

Log360 is an integrated SIEM solution combining the capabilities of ADAudit Plus, EventLog Analyzer, DataSecurity Plus, M365 Manager Plus, Exchange Reporter Plus, and Cloud Security Plus. Some of its important features are:

• Monitoring and auditing critical Active Directory changes in real time.
• Automatic collection, analysis, reporting, and archiving of logs from Windows and Linux and Unix machines; IIS and Apache web servers; SQL and Oracle databases; and perimeter security devices.
• Real-time reporting on critical events in Azure Active Directory, Exchange Online, and Microsoft Exchange Server.
• Holistic view of activities in AWS and Azure cloud infrastructures.

About Log360

Log360 is a unified SIEM solution with integrated DLP and CASB capabilities that detects, prioritizes, investigates, and responds to security threats. It combines threat intelligence, machine learning-based anomaly detection, and rule-based attack detection techniques to detect sophisticated attacks, and offers an incident management console for effectively remediating detected threats. Log360 provides holistic security visibility across on-premises, cloud, and hybrid networks with its intuitive and advanced security analytics and monitoring capabilities. For more information about Log360, visit manageengine.com/log-management/.