Check that installed software is always updated at the latest version

Add honeypots to mislead attackers

Act as a firewall

Monitor activity and identify possible attacks

Collect logs

Isolate critical components of the infrastructure in case of threat detection

Provide analysis of traffic and issue reports

Provide cybersecurity advice to administrators and users of the system

Send messages to possible attackers warning them about legal issues