Out-of-band management continuous monitoring for secure classified remote access as a service

A computing system for providing continuous monitoring for a secure, classified remote access virtual desktop infrastructure to an end-user device, comprising:

• one or more processors,
• one or more network interface controllers;
• and
• one or more memories including instructions that, when executed by the one or more processors cause the system to:
• process, via one or more processors, input packets from a Commercial Solutions for Classified program and a virtual desktop infrastructure stack using via a routine, wherein the input packets include:
• (i) one or more event logs, (ii) network traffic, and (iii) system monitoring information;
• process, via the one or more processors, the one or more event logs using a log forwarder;
• process, via the one or more processors, the network traffic using a packet indexing and capture tool;
• ingest, via the one or more processors, the system monitoring information using one or more beats libraries;
• generate, via the one or more processors, indexed logs based on event logs forwarded from an event forwarder, packets of the network traffic forwarded from the packet indexing and capture tool, and system monitoring information forwarded from the one or more beats libraries, using a log indexer;
• generate, via the one or more processors, at least one of analytics or visualizations of the indexed logs;
• and
• facilitate viewing of, via the one or more processors, the at least one of the analytics or the visualizations related to at least one of:
• (i) NetFlow, (ii) one or more applications, (iii) at least one of Application Performance Management (APM) or Network Performance Monitoring (NPM), (iv) security, (v) events, or (vi) logging.

One or more non-transitory computer readable media containing program instructions that when executed, cause a computer to:

• process input packets from a Commercial Solutions for Classified program and a virtual desktop infrastructure stack using via a routine, wherein the input packets include:
• (i) one or more event logs, (ii) network traffic, and (iii) system monitoring information;
• process the one or more event logs using a log forwarder;
• process the network traffic using a packet indexing and capture tool, and
• ingest the system monitoring information using one or more beats libraries;
• generate indexed logs based on event logs forwarded from the event forwarder, packets of the network traffic forwarded from the packet indexing and capture tool, and system monitoring information forwarded from the one or more beats libraries, using a log indexer;
• generate at least one of analytics or visualizations of the indexed logs;
• and
• facilitate viewing of the at least one of the analytics or the visualizations related to at least one of:
• (i) NetFlow, (ii) one or more applications, (iii) at least one of Application Performance Management or Network Performance Monitoring, (iv) security, (v) events, or (vi) logging.