Barracuda Sentinel

Overview

Barracuda Impersonation Protection (formerly Sentinel) combines artificial intelligence, deep integration with Microsoft Office 365, and brand protection into a comprehensive cloud-based solution that guards against business email compromise, account takeover, spear phishing and other cyber fraud.

Netsurion collects the event logs delivered from the Barracuda Sentinel and seamlessly consolidates SIEM, Log Management, File Integrity Monitoring, machine analytics, and user behavior details.

The Netsurion Knowledge Pack for Barracuda Sentinel allows to monitor the following components:

Security – Provides alert details for specific malicious activities.
Compliance – Provides detailed reports on respective events related to threats like spear phishing, account takeover, and more.

Previous Next

Use the syslog to integrate the Barracuda Sentinel into EventTracker. After the Barracuda Sentinel forwards the logs to EventTracker Manager via syslog, configure the alerts, dashboards, and reports into EventTracker.

Security

Alerts

Barracuda Sentinel - Threat detected: This alert is triggered when potentially malicious content or threat like spear phishing or account takeover are detected.
Barracuda Sentinel - Suspicious user login detected: This alert is triggered when a suspicious user logon is detected based on the geo location logon patterns.

Reports

Barracuda Sentinel - Account takeover attack activities: This report provides a detailed summary of all the account takeover alerts like suspicious login activities performed by the users, any inbox rule changes, and more. The report includes User information, IP address details, Logon location, and so on.
Barracuda Sentinel - Spear phishing threat activities: This report provides a detailed summary of all the Barracuda Sentinel events related to spear phishing threat activities. The report includes sender details, recipient address, and more.

Scope

The configuration details are consistent with EventTracker version 9.3 or later, and Barracuda Sentinel (Impersonation Protection).

Documentation

To configure the Barracuda Sentinel to send logs to EventTracker, refer to the How-To Guide.

To configure the Knowledge Pack in the EventTracker console, refer to the Integration Guide.