Arctic Wolf - Another Layer of Protection
Use Cases and Deployment Scope
Pros
- Monitoring 365 logins
- Monitoring Windows processes
- Active Directory monitoring
Cons
- Some erroneous 365 alerts about failed logins
- Need an easier method to suppress alerts (outside of email)
- Too many places to look for info in console
Return on Investment
- Stopped unauthorized 365 access on user account
- Pointed out malicious file activity on end point
- Alert sent when a domain admin account was enabled