Endpoint Monitoring & Control

LogRhythm Endpoint Monitoring & Control combines independent user and process auditing with active controls against unauthorized data transfers to removable storage media.  This allows users to create a tamperproof recording of who is accessing what systems when, and to safeguard against unauthorized data transfer between those systems and removable media.

With Data Loss Defender, LogRhythm users are given added assurance that confidential data is not being copied to an external device such as a USB flash drive.  Data Loss Defender actively protects system endpoints from data theft by automatically ejecting a drive before a connection is established, preventing potentially harmful files from being copied to a particular system. 

LogRhythm’s User Activity Monitor logs any users or processes that authenticate to a given server.  This records an entirely independent audit trial that can be used to either supplement local auditing systems or to validate that those system logs have not been modified.  The User Activity Monitor creates yet another layer of assurance that information is correct when conducting forensic investigations. 

Data Loss Defender

• Independently audit and log the transfer of data to USB devices
• Automatically eject USB devices before sensitive data can be transferred
• Central policy based administration and configuration
• Alert and report on inappropriate data transfers
• Available in Windows System Monitor and System Monitor Pro

User Activity Monitor

• Independently audits users and processes accessing hosts locally, remotely and via shares.
• Records logons and logoffs.
• Records session duration
• Logs all observed  activity
• Centrally managed
• Supplements Local Auditing Systems
• Maintains consistent logon/logoff record across different operating systems
• Available in Windows, Unix and Linux System Monitor and System Monitor Pro