Publication Date – October 25, 2021
With the significant increase in remote work, Bitsight Work from Home allows you to query your VPN logs and detect systems that may be at risk and are remotely connecting to your network. Bitsight Security Performance Management for Splunk allows you to quickly identify home office IP addresses using available log sources in Splunk, like VPN logs. Those IPs are then used to gather security risk observations from the Bitsight platform. These observations can be used to:
- Discover security issues that reside on work from home IPs to help inform existing incident response or insider threat activities.
- Monitor higher risk remote operating environments, such as access to sensitive data or intellectual property (e.g., Exes, software devs).
- Educate employees on potential security issues as part of security training & awareness programs.