Amazon CloudFront

Version: ETS AWS LogForwarder v1.0.10 or later.

Amazon CloudFront Web Service is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers across the globe with low latency and high transfer speeds.

Netsurion's Open XDR platform seamlessly combines SIEM, Log Management, File Integrity Monitoring, Machine Analytics, and User behaviour monitoring. The dashboard, category, alerts, and reports in Netsurion’s Open XDR platform benefit in tracking critical activities, security warning activities, and others.

After configuring the Amazon CloudFront to forward logs to Netsurion's Open XDR platform via syslog, then configure the alerts, dashboards, and reports to the Netsurion's Open XDR platform.

For a pre-integrated AWS instance, update the version for ETS AWS LogForwarder to v1.0.10 or above.

The following are some of the Data Source Integrations available in Netsurion’s Open XDR platform.

Alerts

Type Name Description
Security Amazon CloudFront - Configuration manipulation detected This alert is triggered whenever the configuration for distributions is deleted or maliciously modified.

Reports

Type Name Description
Security Amazon CloudFront - Activity overview This report contains information related to all console activities concerning the CloudFront service.

Dashboard

Type Name Description
Security Amazon CloudFront – Critical activities by action This dashlet provides information on actions that can disrupt the CloudFront configuration.
Security Amazon CloudFront – Configuration changes This dashlet captures any modification detected in the CloudFront configuration.
Security Amazon CloudFront – Origin access control modifications This dashlet provides information on origin access creation and modification in CloudFront distributions.

Documentation

The configuration details are consistent with the Netsurion Open XDR platform version 9.3 and later, and ETS AWS LogForwarder.

Download How-To Guide and Integration Guide for configuration instructions and more information.