Monitoring AWS instances

Installing the ThreatLockDown agent on the AWS EC2 instances provides information and monitoring about what's going on inside of them.

The agent runs as a service on the instance and collects different types of system and application data that forwards to the ThreatLockDown manager through an encrypted and authenticated channel.

Thanks to the ThreatLockDown agent, there are some capabilities available to monitor the instances:

• Log data collection

• File integrity monitoring

• Malware detection

• Security policy monitoring

• System inventory

• Vulnerability detection

To learn more about the different ThreatLockDown capabilities, check out this section.