Monitoring Windows KVMs for malicious apps

[Hai]

Hello,

Recently more and more spammers started ordering windows kvms on our hosting platform. They install malicious - and web cracking apps on our servers. Checking servers manually consumes a lot of time. Are there any solutions to monitor windows kvms for malicious activities like zabbix or something simmiliar that would report what the windows servers are running? Do you have any other suggestions ?

 

[LnxBil]

Recently more and more spammers started ordering windows kvms on our hosting platform. They install malicious - and web cracking apps on our servers. Checking servers manually consumes a lot of time. Are there any solutions to monitor windows kvms for malicious activities like zabbix or something simmiliar that would report what the windows servers are running? Do you have any other suggestions ?

I'd go with a deep packet inspection framework on our in/egress router, but non-filtering. I'd add a section in your TOS to prohibit any malicous activity (including a FULL list of what's not allowed) and block those customers accordingly.