Monitor server is down inform
THREAT158
· Inform: Handled by telling users how to protect themselves.
· Defined in catalog.py:2720
- Risk
- Low impact × Medium likelihood = 3 low
- After mitigations
- Low impact × Medium likelihood = 3 low (unchanged)
OSSec logs are not collected, alert emails are not sent to administrators
Threat actors: Any
Mitigations
No mitigations in place.
Possible further mitigations
- OSSEC heartbeat alert MITIG230 proposed
Residual risk
Candidate for further mitigation efforts.
Where it applies
Applies to 1 component in 1 scenario.
Physical and host layer · Monitoring Server (host)
Notes
Further mitigations: Send nightly heartbeat alert (MITIG230). Automated test for mitigation: No.
How this threat is matched
Listed for these components. A boundary covers every component inside it.