Adlumin, an N-able company

We use Adlumin as an automated log review, monitoring, and protection system that scans for anomolies in our technology stack that could potentially be a problem. It then emails us and/or takes action depending on the settings we've configured and/or the defaults configured by the company.

The most obvious business use case is account compromise alerting and protection, but depending on your specific technology stack, it can also protect against phishing attacks, ransomware, and a number of other malicious scenarios.

• There's no way to accurately calculate the return on investment for preventing an attack, but the average cost of a business email compromise (from quick Google searching) is 135K. If we use that number, for us it's at least a 5x ROI even if it catches only one such attack (and it has caught more and other attacks besides)
• It does take some managing (getting an AI alert for nothing late at night is not awesome) but that's far better than ignoring an attack.
• It's not the cheapest tool, but it's a necessary one, especially in today's age of constant data breaches and password leaks.

N-able N-central, N-able Take Control, Cove Data Protection

I use Adlumin to monitor my network's health. It tells me what devices may be at risk, my overall network health, and if I am in compliance with Group Policies and account setup. In addition, Adlumin can detect whether an account has been exposed on the dark web. I can integrate my firewall, Azure, DUO, VPN, and EDR data to enhance monitoring. The other reason Adlumin is important to us is that we are a very small company, but we also need 24/7 network monitoring, and we don't have the manpower to do it on our own.

• We used to be with an MSP before I was hired, and the company spent over 20K per year for that service. With N-Able, we have reduced the cost by over half.
• I spend minimal time now patching computers because this is all automated. I sometimes have to patch a couple of machines because I missed a patch, but it has saved me a great deal of time.
• I save a great deal of time with Board Reports because they are automatically generated for me each month.

N-able N-sight RMM, N-able Passportal, Cove Data Protection

We use Adlumin, along with our EDR solution, with overlapping SOC coverage to ensure my clients are safe from ransomware and any kind of M365 token hijacking. We also use Adlumin for a SIEM solution that monitors all of our servers, firewalls, and switches.

• Frees my techs to allow more focus on project related work.
• Allows for after hours monitoring so my techs don't have to be on call as often.

Netwrix Threat Manager and OpenText Access Manager

INKY Behavioral Email Security Platform, Kaseya NOC Services, Microsoft 365 Business Premium

Accessium uses Adlumin not only for our own organization but those that we support as well. We are challenged with working with a diverse set of medical devices, specifically modalities such as MRI’s, CT’s, X-Ray, Ultrasound machines and more. These are all managed in at least part by their manufacturers but exist in mixed network environments which are managed by both our organization and in concert generally with internal client resources. Because of this there are multiple security profiles that we have to deal with and we have found ways to ingest this diverse log and data set to provide meaningful insights within Adlumin. We have been able to create custom rules to alert each manufacturer based on their own unique security profiles. This has enabled us to work in concert with the managed Adlumin SOC, our external vendor partners, the clients themselves and our own response team to stay ahead of suspicious activity in our medical imaging environments.

• Since implementation we have had 0 incidents that went beyond the initial discovery phase.
• We have realized a savings on our cyber insurance as well as our clients by demonstrating the capabilities inherit with our implementation.

Arctic Wolf Managed Security Awareness

Liongard, Sophos Managed Detection and Response

I use Adlumin, an N-able company, as my SOC for customers willing to pay for advanced security services. It is helpful to outsource this as I don't have a budget for a 24/7 internal soc. This gets deployed to the majority of my customers. This also helps not have to sit through logs in a SIEM with the SOAR actions being able to respond to potential incidents more quickly than a human as well.

• Protecting users from unauthorized sign ins and responding when there is an impossible sign in event with SOAR actions has saved our customers on multiple occasions.
• Not having to respond directly to EDR events and letting the SOC take the first pass at them has saved countless hours of investigation internally.