What information is sent to the cloud by Imunify360?

The following messages are sent by Imunify360 agent to our server: 

- Incidents detected by Imunify360 sensors and plugins - Includes ModSecurity, OSSEC, Proactive Defense, LFD, PAM, Unified access logger, etc

- IP addresses of visitors causing malicious/suspicious activity using RBLs (ModSecurity, PAM module)

- CAPTCHA verification info

The following messages are sent by both Imunify360 and ImunifyAV+ agents:

- Some basic configuration parameters of the operating system (such as CPU, Memory size, number of users in the system, OS version, hosting panel name, etc)

- users domains (to be checked in reputation engine)

- invoked commands in the UI (without any sensitive information)

- information regarding scanned files including malicious and suspicious files content

- files reported as false-positive by the customer

- various logs and debug information for the support purposes by the Imunify Doctor tool.