Your firewall, cloud services, servers and backups all keep a record of what happens on them. Managed SIEM collects those records, watches them alongside your computers and accounts, and keeps them for the day an insurer, auditor or investigator asks.
Without logs, nobody can answer it. Not you, not your insurer, not a forensic investigator. Many small businesses discover this only after something has gone wrong, when the records they needed were never kept or have already been overwritten.
Logs also show what a single computer can't: an attacker probing your firewall, a change to a cloud account, or someone switching off your backups. Ransomware crews frequently target backup systems first, to remove your way back before they strike.
Connection attempts, VPN logins and configuration changes from the devices at the edge of your network.
Activity from cloud services including Microsoft Azure and Google Cloud.
Windows event logs collected through the same agent that runs Managed EDR.
Backup activity detected and collected automatically, so tampering with your recovery is seen.
Supported sources as published by Huntress, including its September 2026 product update.
Not every log is useful. We identify the sources that matter for your risks, your insurer and your clients.
RRCyber · setupSystems send their logs to the platform over standard methods. Most need a configuration change, not new hardware.
RRCyber · setupLog activity is analysed alongside your endpoints and accounts, so related signals are seen as one story.
Huntress SOC · continuousKept for the period you need, and available if an investigation, insurer or auditor asks for them.
Huntress platform · ongoingIncluded
Not included
Not every business needs a SIEM on day one. If your insurer or clients don't ask for logs and you have no servers or firewall to speak of, we'll tell you to start with Managed EDR and Managed ITDR.
Where your data goes. Security data from your computers and accounts is processed by Huntress, our security operations partner, in the United States. Huntress handles it under a data processing agreement that covers Canada's privacy law (PIPEDA), notifies us of any breach affecting it within 72 hours, and redirects government requests for it to us where the law allows. If your organization has rules about where data can be processed, raise it on your call and we'll walk through it before anything is installed.
Each service is watched by the same 24/7 security operations centre, so a stolen login and a suspicious laptop are seen as one incident, not two.
Endpoint detection and response. 24/7 detection and response on every computer.
Learn more →Identity threat detection and response. Stop account takeover in Microsoft 365 and Google Workspace.
Learn more →Identity security posture management. Microsoft 365 settings hardened, and watched for drift.
Learn more →Thirty minutes. We'll look at how your computers are covered today, what would happen if one were compromised after hours, and where the gaps are. A plain answer either way.
Or email sales@rrcyber.ca