Backup Systems

Overview

Monitoring logs from backup systems to ensure the availability and integrity of backup data and detect any unauthorized access or potential threats.

Category	Description
Backup Compliance and Audit Trails	Maintain backup compliance by generating audit trails, backup reports, and compliance reports to demonstrate adherence to backup policies, data protection regulations, and industry standards. Generate backup audit logs, backup activity reports, and backup verification reports for compliance audits and regulatory assessments.
Backup System Health and Performance	Monitor backup system health and performance metrics, such as backup server CPU utilization, memory usage, and disk I/O activity. Detect backup system errors, performance degradation, or resource constraints to optimize backup system performance and reliability.
Backup Monitoring Alerts and Notifications	Backup monitoring alerts and notifications to receive real-time alerts and notifications for backup job status changes, backup failures, or backup anomalies. Set up alerts for backup job completion, backup job errors, or backup system health issues to proactively address backup-related issues.

Alert Name	Description
Backup Compliance Audit	Ensures all critical data is backed up according to regulatory and internal policies.
Unauthorized Changes to Backup Configuration	Detects unauthorized modifications to backup configurations, which might indicate a potential security breach or policy violation.
Backup Data Integrity Check Failure	Verifies the integrity of backed-up data to ensure it hasn't been tampered with or corrupted, maintaining data reliability and trustworthiness.
Backup Access Anomalies	Monitors for unusual access patterns to backup systems, which could suggest unauthorized access attempts.
Backup System Resource Utilization	Tracks the resource usage of backup systems to ensure optimal performance and identify potential bottlenecks.
Backup Job Failure	Alerts on failed backup jobs to quickly address any issues and ensure data is properly protected.
System Health Degradation	Monitors for signs of declining system health that could affect backup reliability and performance.
Critical Backup Alerts	Prioritizes alerts for critical backup issues requiring immediate attention to prevent data loss or breaches.
Backup Storage Threshold Warning	Alerts when backup storage is nearing capacity, allowing for timely intervention before space issues impact backups.
Unusual Backup Activity Detection	Detects patterns of backup activity that deviate from the norm, suggesting potential unauthorized actions or system issues.

T1485, T1222, T1490, T1078, T1499, T1486