Huntress Managed SIEM
Named by 6 kept items in this workspace.
Search every workspace for Huntress Managed SIEM. It matches the name as written, so it can find other things that share it.
The items that name it 6
Security information and event monitoring; runs multiple detectors for brute force and password spray, now enhanced with correlation rules that fire only when multiple weak signals align.
Supports CMMC Level 2 compliance by providing documentation to support a successful audit
Identity and Application Activity Search used to review Entra audit logs for application consent/update events and downstream actions (mailboxes, files, identities accessed) tied to OpenClaw or Moltbot.
Referenced as spotting VPN compromises early in the attack chain
Ingested SonicWall telemetry and correlated with EDR detection to identify and piece together the intrusion timeline
Used alongside Managed EDR by the school in the RDP brute force incident
All technologies in this workspace.