CyberLion Office 365 Security Monitoring is a managed security product that monitors Office 365 activity using CyberLion’s analytics platform, SIEM, threat intelligence, and 24/7 365 Security Operations Center to identify threat-like behavior such as unauthorized access to cloud mailboxes, admin changes in the environment, impossible logins, and brute force attacks.
Tracks admin activity and changes to the O365 tenant
Tracks when emails delegates are added
Detects failed or suspicious login attempt
Detects changes to MFA
Monitors geolocation access with IP location sourcing and login from suspicious or unusual countries
Detects logins from different geolocations within a short period of time
Alerts when email forwarding rules have been created outside of the domain
Multi-tenancy dashboard
SIEM correlation & SOC analysis
Support for custom alerting and reports
Visibility to login activity in the dashboard
Detects potential threats of suspicious activity in Office 365
Supports industry & regulatory compliance requirements