Cybatek Managed HIDS
Host-based Intrusion Detection System


How it works
An agent is installed on the relevant PC or Server and gets linked to our Server. The agent does not collect any private or confidential information. It instead monitors system files, event logs and in the case of Windows, the Windows registry for any unexpected or unauthorized changes. If a change in a file is detected, whether it be in size, permissions or the hash, the agent sends out an alert via our Server. This forms part of the early-warning system that gets installed. If a brute-force attack is detected, the active response of the agent kicks in, where-by it will block the source IP of the attacker from further communication by routing all traffic from that particular source IP to a fictitious IP address. This is most effective in preventing hackers gaining access as the PC or Server no longer responds to their efforts. All the while maintaining integrity and allowing the user to carry on as normal.
The agent is compatible with most Operating systems including Windows, Linux and MAC OS.
The agent checks the following…
| Connection attempts | Web scan | Generic scan | |
| Authentication success / failure | Invalid login | User account modified | |
| Policy changed | SQL Injection | Generic attack | |
| Worm | Virus | Invalid access | |
| Rootkit detection | File integrity monitoring | ARP spoof | |
| Multiple auth failures | Brute force attack | Firewall drop | |
| Multiple errors | |||
Pricing:
International:
- 3 USD per PC per month.
- 12 USD per Server per month.
National – South Africa Only
- R45 per PC per month.
- R200 per Server per month.
Payment Terms: All fees are payable in advance annually.
