Monitoring
CatchBefore has the following feature list on offer:
- On Premises Sync Status
- New 365 Alerts
- Login Success Percent (alert if too low)
- Secure Score Percent (alert if too low)
- MailBox Quota (alert if too close to quota)
- OneDrive Quota (alert if too close to quota)
- SharePoint Quota (alert if too close to quota)
- Overseas Successful Login (alert if overseas successful login detected)
- Overseas MFA Failure (alert if MFA stopped an otherwise successful login)
- Email Rule containing a forward (alert if an email rule containing a forward is detected)
- Email Rule containing a delete (alert if an email rule containing a forward is detected)
- Company and Global Administrator count (alert if too low, or too high)
- Administrator with Licenses attached (alert if a user has an active account and is also an administrator)
- Possible Under Utilised Licenses
- Inactive Mailbox
- Inactive OneDrive
- Inactive SharePoint
- Inactive Teams
- Directory Quota
- Tenant Country (Alert if country is not local)
- Verified Domains (Alert if one of the domains in use is not verified by Microsoft)
- Domains Health (A detailed listed of DNS health checks)
- License Health (Alert if licenses are suspended, or close to suspended)
- Compromised Account (Alert if email user address if found in dark web compromised list)
- Successful login from blacklisted IP address
- New Application detected. (Alert if a new 365 application has been given access to the tenancy (Administrative/tenancy wide) )
- Application Role Grants (Alert if a new 365 application has been given access to the tenancy (granted by user) )
- MultiFactor Authentication Status (Alert if any users don’t have MFA enabled, and enforced)
- Domain Phishing list lookup
Please note that not all checks are included with every plan. See our Product Information for more detail.
Regular Reviews
Stand-alone point-in-time reviews are not always as beneficial as they seem. It is not uncommon to see incorrect or partially implemented recommendations, leading to a false sense of security. CatchBefore offers regular ongoing reviews to ensure that the health and configuration of your tenancy stays optimal.
Please note that reviews are included only with specific plans. See our Product Information for more detail.
Recurring Reports
Our reports are designed to deliver information in a way that is easy to understand. Key items covered in the reports cover:
- Tenant information (Name, Country, Last Sync, Directory quota status)
- Secure score
- Domains in use and DNS status
- Users summary (Active, Total, Possible underlicensed, inactive accounts)
- Hardening information (MFA Status, CA/GA count, Admin accounts with licenses, Conditional access policies)
- Quotas and usage (Exchange, OneDrive, Sharepoint)
- Audit Logs (successful access logs, as a %, MFA failures, suspected overseas logins)
- 365 Alerts that require attention
Please note that reports are included only with specific plans. See our Product Information for more detail.
More detail
Looking for more detail? See CatchBefore Product Information