Microsoft Windows IT Security Auditing Software

Nav Menu

Change Auditor

Overview
Platforms
Featured Products
Resources

Contact Sales

10:32

With Change Auditor, you get complete, real-time IT auditing, in-depth forensics and security threat monitoring on all key configuration, user and administrator changes for Microsoft Active Directory, Azure AD, Exchange, Office 365, file servers and more. Change Auditor also tracks detailed user activity for logons, authentications and other key services across enterprises to enhance threat detection and security monitoring. A central console eliminates the need and complexity for multiple IT audit solutions.

Hybrid environment auditing

Get a single, correlated view across your hybrid Microsoft environments, with visibility of all changes whether on-prem or in the cloud.

Security threat monitoring

Audit and block exploits such as credential theft and AD database copies, and identify applications using authentications over insecure protocols.

Golden Ticket detection

Detect and alert on common Kerberos authentication vulnerabilities used during Golden Ticket / Pass-the-ticket attacks.

Object protection

Protect against changes to critical data within AD, Exchange and Windows file servers, including privileged groups, GPOs and sensitive mailboxes.

Normalized 5W audit details

Translate cryptic native logs into a simple, normalized format highlighting the who, what, when, where and workstation details and before and after values.

Real-time alerts on the move

Send critical change and pattern alerts to email and mobile devices to prompt immediate action, even while you're not on site.

SIEM integration

Integrate with SIEM solutions to forward Change Auditor events to Splunk, ArcSight, QRadar or any platform supporting Syslog.

Auditor-ready reporting

Generate comprehensive reports to support regulatory compliance mandates for GDPR, PCI DSS, HIPAA, SOX, FISMA / NIST, GLBA and more.

WE ARE RATED ON

Read Reviews Submit a Review

On Demand Audit Hybrid Suite for Office 365

07:25

With just a few clicks, you can pair Change Auditor for Active Directory and Change Auditor for Logon Activity with On Demand Audit to get a single, hosted view of all changes made across AD, Azure AD, Exchange Online, SharePoint Online, OneDrive for Business and Teams. On Demand Audit proactively highlights security vulnerabilities and anomalous activity, and accelerates incident investigations through responsive search and interactive data visualizations.

Learn How to Upgrade

Features

Account lockout

Capture the originating IP address/workstation name for account lockout events to simplify troubleshooting.

Superior auditing engine

Remove auditing limitations and capture change information without the need for native audit logs, resulting in faster results and significant savings of storage resources.

Security threat timelines

View, highlight and filter change events and discover their relation to other security events in chronological order across your Microsoft environment for better forensic analysis and security incident response.

Improved security insights

Correlate disparate IT data from numerous systems and devices into IT Security Search, an interactive search engine for fast security incident response and forensic analysis. Include user entitlements and activity, event trends, suspicious patterns and more with rich visualizations and event timelines.

Quest InTrust integration

Integrate with Quest InTrust for 20:1 compressed event storage and centralized native or third-party log collection, parsing and analysis with alerting and automated response actions to suspicious events such as known ransomware attacks or fishy PowerShell commands.

Platforms

04:07

Learn about Change Auditor for Active Directory

Active Directory

Change Auditor for Active Directory and Change Auditor for Logon Activity detect and alert on changes to critical objects in Microsoft Active Directory and Azure AD with a single, correlated view across your hybrid AD environment. Track Kerberos, NTLM and ADFS authentications to help proactively identify vulnerabilities.

Change Auditor for Active Directory

Change Auditor for Active Directory Queries

Change Auditor for Logon Activity