Security Information and Event Management

Navigating the cyber battleground: The vital role of network security policy management

The landscape of cyberthreats is continuously evolving, and to keep pace organisations employ robust network security strategies. This involves creating, executing, and maintaining a set of guidelines, or network security policies, on how the organisation’s network should...

Access granted: Mastering the art of permissions

Back in the 20th century, cyberattacks were harder to execute because most computers were not networked, the internet wasn’t really a thing, only a few groups of people had access to computers, and more importantly,...

How ManageEngine ServiceDesk Plus Can Save South African Businesses Money

ManageEngine ServiceDesk Plus: In today’s competitive business environment, it is more important than ever for South African businesses to find ways to save money. One way to do this is to invest in a comprehensive...

The impact of digital transformation on ITSM

Digital transformation is the buzzword that every CIO and most top-level managers are so concerned about. So, for all the hype around it, what is digital transformation, and is it really happening? Yes, it’s happening....

Thwart threats by auditing your network devices.

While network monitoring is important for troubleshooting and ensuring availability, auditing logs generated by your network devices is crucial from a security aspect. Syslogs from network devices (such as firewalls, IDS/IPS, routers, and switches) contain...

IT security: Disrupting the cybersecurity kill chain by detecting domain reconnaissance

Hardening the security of your network perimeter is crucial, but there is a preliminary step in many attack cycles to keep in mind: Light Weight Directory Access Protocol (LDAP) reconnaissance, or domain recon. Domain recon,...

10 ways to protect your business from insider data theft.

In today’s digital age, trust is a high commodity and the employees and partners that an organisation trusts the most are often the biggest risk to its security. Insider threats pose a particular challenge as...

10 crucial audit reports for IT security

Can you detect breaches in your network? Any of them could indicate an attack attempt. Data breach studies have shown that it often takes months for organisations to discover they’ve been breached, primarily because security...

The impact of cyber fouling and how scavengers might capitalise on it

Inside the mind of a hacker: Alternate identities and varied behavioural patterns

The boom of information technology opened an entirely new world of identities and opportunities. Most users’ journeys in the cyber world started with the creation of an email address. That email address, which served as...

Great Power(Shell) doesn’t always come with great responsibility: Sometimes, SIEM is all you need

Fileless threats are on the rise. These threats occur when cybercriminals use pre-existing software in victims’ systems to carry out attacks, instead of using a malicious attachment or file. More often than not, a criminal’s...

Beyond the ransom: Unpacking the true cost of a ransomware attack.

Ransomware has become a significant threat in today’s digital landscape, with cybercriminals using it as an effective means of making money, often with a low cost and high profit margin. Victims rarely recover their stolen...

How to calculate the cost savings from your SIEM implementation

Organisations are losing money due to delayed threat detection and response, regulatory fines, and wasted analyst time. A SIEM tool can help unveil and eliminate these hidden cost wasters. This whitepaper will help you understand...

The Essential Eight Cybersecurity Controls Explained

According to Cybersecurity Ventures, the annual damage caused by cybercrime worldwide will exceed $10.5 trillion by 2025. There is a tremendous amount of data being generated, and this amount will soon exceed 200ZB. Clearly, protecting...

The ultimate price: The morality of paying your attacker their ransom

If you had a Dirham for every time you heard this and followed up with immediate action, you’d be a Shiekh by now. But alas, we’re here because you didn’t do your due diligence and...

Achieving Zero Trust: ManageEngine’s path to upgrading cybersecurity

Zero Trust may seem intimidating without the right guidance. If your organisation is stepping into this ocean now, this e-book is for you. We will start with ManageEngine’s ongoing experiences and work our way to...

How to detect and respond to cryptojacking attacks

In a time when the world was shoring up its defences against ruthless ransomware attacks, attackers found a way to reap profits by stealthily mining currency from unsuspecting victims. That’s why the year 2021 saw a NEW...

Getting the best out of your SIEM: The handbook for security analysts

An effective SIEM solution ingests logs from different network sources to give visibility into user and host activities. It uses capabilities such as threat intelligence and behavioural analysis to set correlation rules to spot malicious...

7 key features of SIEM that every enterprise administrator should be aware of

A SIEM solution has become an integral part of an organisation’s security arsenal. But organisations often overlook the system’s capabilities, owing to a belief that SIEM functionalities are too complex and the architecture inscrutable. Regrettably,...

Device discovery: The path to total network visibility

For an organisation to prevent cyberattacks, it first needs complete visibility into all the events that occur within its network. With this visibility, the organisation can analyse risky behaviour by users and entities, and take...

How important is cryptography in network security?

“Please enter the one-time-password (OTP) that has been sent to your registered mobile number.” The next time you see a statement like this remember that there is a definite reason behind it. IT administrators utilize...

Uber data breach 2022: How the hacker annoyed his way into the network

On Sept. 15, Uber Technologies Inc. was breached by an 18-year-old. The hacker purchased an employee’s stolen credentials from the dark web and pushed a flood of multi-factor authentication (MFA) requests and fake IT messages...

IT security hardening at healthcare organisations

5 incident response plan mistakes

Hunting down threats, assessing the security systems, and mitigating security incidents: Cybersecurity response teams of security operations centre (SOC) play a major role in preventing security attacks and controlling any damage done by a data...

Cybersecurity outlook for 2022

Guide to monitoring security threats from related party interactions (RPIs)

The ever-evolving cyber world presents a multitude of security challenges to organisations. Threat actors constantly update their skills and devise new methods to launch cyberattacks. It’s high time to identify and safeguard the right attack...

Is your sensitive data overexposed?

7 types of cyberthreats plaguing the healthcare industry

Ideally, healthcare would be the last industry to be targeted by hackers and cyberattackers—surely no one would want to cripple critical hospital infrastructure and play around with lives. However, the healthcare industry continues to be...

7 vital security tips for enterprise cloud security administrators

Every organisation has tons of sensitive information stored in the cloud. The unanticipated surge in remote work resulted in an increase in the amount of information stored in the cloud. According to TechJury, 67% of enterprise infrastructure...

The one-stop solution for keeping your IT environment secure

Cyberthreats continue to evolve, causing trillions of dollars in losses. There will be a 76% increase in cybersecurity breaches by 2024, according to StealthLabs. A report by IBM states that it took an average of...

What is shadow IT? | Risks and mitigation

What is shadow IT? Shadow IT refers to the use of any application, device, or cloud service in an organisation without explicit approval from the IT department. This usually happens when employees find more efficient...

Reinventing cybersecurity with a multi-layered approach

EventLog Analyzer year in review: 2021

Our log management solution, EventLog Analyzer, has had yet another busy year. Being named in the 2021 Gartner Magic Quadrant for SIEM for the fifth time was one of the high points. We also had...

Looking back at the ADSelfService Plus features and enhancements from 2021

The new year has arrived, and recapping the features and enhancements ADSelfService Plus realised in 2021 is fitting. The integrated self-service password management and multi-factor authentication (MFA) solution for Active Directory and cloud applications added...

Five worthy reads: Cybersecurity mesh—An extension of the Zero Trust network

With the accelerated digital transformation, organisations had to jump in and adopt cutting-edge technology to support the new work style. Since only 31% of global organisations have implemented a Zero Trust network (ZTN), according to ManageEngine’s...

ADAudit Plus’ year in review

2021 was a feature-packed year for ADAudit Plus. Having rolled out an array of new auditing capabilities, features, and enhancements, ADAudit Plus has continued to make it easier for you to gain visibility and control over...

Anomaly Detection in Cybersecurity

Safeguarding your data to ensure business continuity

Humans have come a long way since the stone age, where we discovered fire and had the bright idea of using a round object to make hauling loads easier. In all the evolutionary exploits, one...

The enemy within — An insider threat management handbook

Get your free copy of our e-book, The enemy within — An insider threat management handbook, to understand the threat insiders pose to your organization, their behaviour along with system indicators, and how to prevent security...

Ransomware demystified: What security analysts need to know

Watch out for tenants living off your land

The cyberworld has witnessed and defended against several forms of attacks. Some of the most common ones known to disrupt a network include credential stealing, malware installations, worms and viruses, and insider threats. In order to...

Securing endpoints, part 1: Ensuring hackers don’t manipulate your browsers to carry out attacks

In a world of automation, computers and the data on them have become the backbone of many organisations. But data is a double-edged sword. It can be leveraged by organisations to improve operations, but in...

How Kaseya fell victim to a ransomware attack

On July 2, 2021, the cybersecurity world woke up to yet another ransomware attack—this time, the victim was Kaseya, a software enterprise that provides IT management solutions predominantly to managed service providers (MSPs). The attack...

Beware of malware attacks: Little-known facts and why they matter

3 reasons SMBs are more vulnerable to cyberattacks than large enterprises

Details about cyberattacks on small-and-medium-sized businesses (SMBs) may not make it to the headlines, but numerous industry reports and surveys have highlighted the grim reality of the SMB cybersecurity landscape. Even before the COVID-19 pandemic, SMBs...

An admin’s guide to secure remote access

5 hacks that’ll help SMBs bolster password security in 2021

Passwords, especially those that give access to an organisation’s Active Directory (AD), are a prime target for cybercriminals. Once a hacker compromises an organisation’s AD, they can alter security policies, escalate privileges, or even execute...

3 simple ways to ensure email security in the post COVID-19 era

Why companies need URL filtering for enhanced cloud protection

The cloud landscape is rife with unsafe URLs and inappropriate content. This—coupled with the accelerated adoption of cloud applications in the workplace—has created an urgent need to scrutinize and control the use of these online...

10 essential cybersecurity tips for beginners

Organisations today are challenged by an increased exposure to cyber threats. Attackers often target emerging technologies since the new technology is often ill-equipped to handle an attack. Moreover, the internet has become filled with malicious...

Establishing a least privilege environment in healthcare organisations

According to the Cost of a Data Breach report by Ponemon Institute, it takes 358 days on average to identify and contain a data breach in the healthcare industry. This means that cyberattackers may lurk...

Cybersecurity solutions guide

There are tens of thousands of cybersecurity incidents reported across the globe annually. The mass adoption of cloud solutions and remote work in the wake of the pandemic means most organisations’ attack surfaces have increased...

Securing a distributed workspace: A cybersecurity checklist for long-term remote work

One of the lasting changes brought about by the COVID-19 pandemic is that it forced organizations to rethink the concept of a workspace. As remote work became inevitable, IT teams had to enable the secure...

Why ManageEngine PAM360 is the ultimate privileged access management solution

ManageEngine continuously builds the most comprehensive and tightly integrated IT management software suites on the market. Over 90 products and free tools are offered to manage all your IT needs, including Active Directory management, help...

Working from home? Be sure to follow these security best practices

Until now, a majority of enterprises and their employees have been safely protected by their office network’s robust security infrastructure. However, things have drastically changed with the COVID-19 pandemic, and enterprises have been forced to...

Is IT security under attack?

From credential theft to network vulnerability exploitation and ransomware incidents on highly secure organizations, the year 2020 has been surprisingly rough on IT security. In the wake of the COVID-19 pandemic, companies around the world...

Using Indicators to deal with security attacks

Threat intelligence and the SIEM advantage

7 ways to reinforce privileged access security in your enterprise

Automate compliance reporting for all major audits, including SOX, HIPAA, PCI DSS, FISMA, GLBA, and ISO 27001

Regardless of the compliance requirement that you are trying to fulfill, the current methods for generating reports are inefficient, ineffective, and fail to truly provide information that can ensure network security. Auditors, administrators, and security...

Breach notification requirements of POPIA: The importance of SIEM

Harness SOAR and SIEM to boost IT security

The need for organisations to strengthen their cyber security posture has become more critical than ever before. In today’s digital era, practically every business has a hybrid infrastructure, which has enabled users to access information...

The 5 essential components of successful file server auditing

File server auditing is an essential process, and inattention can cost your organization heavily, both in terms of business impact, and governmental financial penalties. Imagine this scenario: A professor at a university unscrupulously accesses several...

IT management solutions for government

Smart IT management to keep your financial company in the black

As technological advancements change the way you do business, it is important that you can count on your IT to keep everything up and running. ManageEngine solutions give you complete visibility of your IT infrastructure,...

Breaking down the San Francisco airport hack

The IT Professional Remote Working Challenge

#RemoteWorkingChallenge We can only imagine that the increase in remote working has posed challenges for you the IT professional. From dispersed end users to security vulnerabilities and more, it cannot be easy. We would like...

Cybersecurity challenges of the work-from-home model

This decision to declare the COVID-19 a global pandemic caused several health and safety measures, and normal life came to a halt in many countries. This resulted in many organizations around the world adopting remote-working methods to...

How VPN bandwidth monitoring helps retain remote workforce productivity

The COVID-19 outbreak has brought businesses around the globe to their knees. To survive, organizations across verticals are rolling out work-from-home policies. And for effective remote working, it’s imperative to employ VPN connections, as they...

Strengthen your IT to manufacture at maximum efficiency – IT management solutions for the manufacturing industry

Why businesses need to suit up against cyberattacks in 2020

ManageEngine recognized as best cloud security vendor

Five worthy reads: The privacy implications of AI

Five reasons to choose Log360, part 5: Integrated compliance management

Five reasons to choose Log360, part 4: Advanced security features

SIEM helps you secure your network from internal and external attacks through its advanced security capabilities. Threat intelligence helps you secure your network from various types of threats, including malware, phishing and spam, advanced persistent...

Five‌ ‌reasons‌ ‌to‌ ‌choose‌ ‌Log360,‌ ‌part‌ ‌3:‌ ‌ Comprehensive‌ ‌network‌ ‌auditing‌

Five reasons to choose Log360, part 2: Multi-environment support

Five reasons to choose Log360, part 1: User-friendly deployment and UI

SIEM solutions are a must-have in any organization’s security toolkit. They allow you to analyze events from your network, gain actionable insights into network activity, and detect and mitigate data breaches and other security incidents,...

11 steps to configure your firewall for maximum effectiveness

Your firewall is the first line of defence against security threats; but simply adding firewall devices to your network doesn’t ensure your network is secure. You need to regularly analyse your firewall’s syslog and configuration,...

An admin’s guide to boosting your Office 365 Secure Score

Your Office 365 Secure Score indicates how secure your current Office 365 environment is compared to the highest possible level of security. If your score isn’t as high as you’d like it to be, there...