• 포털 전문가 되기
• 다운로드
• 인쇄
• 내 다운로드 ()

• 지원
• 기술 문서
• Change Auditor 7.2
• Change Auditor 7.2 - Whats New

Change Auditor 7.2 - Whats New

콘텐츠 탐색  

What's New in Change Auditor 7.2

Cyber security enhancements Certificate authentication for Office 365 Active Directory Federation Services auditing enhancements Foreign forest support Additional events Additional platform support Miscellaneous features and enhancements

What's New in Change Auditor 7.1.1

Additional Office 365 Exchange Online mailbox events Enhanced security auditing Search enhancements SIEM tool integration improvements Ability to audit and protect the Active Directory Database Ability to audit Active Directory Federation Services Foreign forest support Authentication enhancements Additional platform support Miscellaneous features and enhancements

What's New in Change Auditor 7.1

Azure Active Directory and Office 365 updates Active Directory updates Foreign forest support On Demand Audit integration updates Authentication and Logon activity updates Additional platform support Miscellaneous features and enhancements

What's New in Change Auditor 7.0.4

Foreign forest support Additional internal events Azure Active Directory and Office 365 updates Threat Detection enhancements SIEM subscription updates and enhancements Additional platform support Miscellaneous features and enhancements

What's New in Change Auditor 7.0.3

Change Auditor and On Demand Audit integration Azure Active Directory and Office 365 enhancements Threat Detection enhancements Additional internal events Additional platform support Miscellaneous features and enhancements

What's New in Change Auditor 7.0.2

Threat Detection updates and enhancements SIEM subscription updates and enhancements Additional PowerShell commands Ability to search based on authentication type and port Enhanced security between Change Auditor components (FIPS compliance) Azure Active Directory and Office 365 enhancements Additional platform support Miscellaneous features and enhancements

What's New in Change Auditor 7.0.1

GDPR built-in reports SIEM tool integration improvements Azure Active Directory auditing improvements Active Directory auditing improvements Improved tracking of changes to searches Additional platform support Email alert improvements Office 365 Exchange Online search improvements Miscellaneous enhancements and updates

What's New in Change Auditor 7.0

Updated license format Ability to forward event to third party tools Enhanced data security between the SQL Server and the coordinator Ability to manage Active Directory protection with PowerShell commands Ability to identify Read-Only Domain Controllers Search enhancements New built-in searches Additional platform support Miscellaneous enhancements and updates

• Viewing Topics 1 - 4 of 71

×

What's New in Change Auditor 7.2

What’s New in Change Auditor 7.2

As a result of ongoing research and development, and in response to customer feedback, the following enhancements have been made in this release of Quest Change Auditor.

•	Cyber security enhancements

•	Certificate authentication for Office 365

•	Active Directory Federation Services auditing enhancements

•	Foreign forest support

•	Additional events

•	Additional platform support

•	Miscellaneous features and enhancements

Cyber security enhancements

Additional Active Directory events and built-in searches that can be used as indicators of possible cyber security attacks.

•	The following events have been added:

•	Different domain SID added to user object sIDHistory

•	Different domain SID removed from user object sIDHistory

•	Well-known SID added to user object sIDHistory

•	Well-known SID removed from user object sIDHistory

•	Same domain SID added to user object sIDHistory

•	Same domain SID removed from user object sIDHistory

•	Different domain SID added to group object sIDHistory

•	Different domain SID removed from group object sIDHistory

•	Well-known SID added to group object sIDHistory

•	Well-known SID removed from group object sIDHistory

•	Same domain SID added to group object sIDHistory

•	Same domain SID removed from group object sIDHistory

•	adminCount attribute changed on Computer object

•	adminCount attribute changed on User object

•	adminCount attribute changed on Group object

•	ServicePrincipalName removed from user object

•	ServicePrincipalName added to user object

•

Irregular domain controller registration activity detected. This event could identify a possible DCShadow threat. DCShadow is a command within Mimikatz that simulates the behavior of a domain controller to push changes to an Active Directory domain through replication, bypassing most of the common security controls.

•	The following searches have been added:

•	Users SIDHistory changed in the last 30 days search

•	Users high severity SIDHistory changed in the last 30 days search

•	Group SIDHistory changed in the last 30 days search

•	Group high severity SIDHistory changed in the last 30 days search

•	AdminCount changed on user in the last 30 days search

•	AdminCount changed on group in the last 30 days search

•	AdminCount changed on computer in the last 30 days search

•	Users servicePrincipalName changed in the last 30 days search

•	All Irregular Domain Controller Registration events in the last 7 days search

•	Ability to create an Active Directory protection template and select a root domain object to prevent users from linking GPOs.

Certificate authentication for Office 365

Due to the fact that basic authentication has been deprecated by Microsoft for Office 365 Exchange Online, certificate authentication is now required for Office 365 auditing. Newly created auditing templates and the associated web application will have the required permissions and certificate. However, If you are using an existing web application, you will need to provide a certificate and ensure that it has the required permissions. See the Office 365 and Azure Active Directory Auditing User Guide for details.

NOTE: Microsoft’s .NET Framework 4.7.1 is required for Office 365 auditing templates in the Windows client or through PowerShell commands.

The following events have also been added:

•	Azure Active Directory web application certificate created

•	Office 365 auditing web application certificate changed

Active Directory Federation Services auditing enhancements

New Active Directory Federation Services - Endpoints events:

•	Endpoint enabled

•	Endpoint disabled

•	Endpoint Proxy enabled

•	Endpoint Proxy disabled

New Active Directory Federation Services - Server Farm events:

•	Server Farm Node added

•	Server Farm Node Primary Computer Name changed

•	Server Farm Node Primary Computer port changed

•	Server Farm Node removed

•	Server Farm Node Role changed

•	Server Farm Node Synchronization Frequency changed

New Active Directory Federation Services - Claims Provider Trust events:

•	Claims Provider Trust added

•	Claims Provider Trust deleted

•	Claims Provider Trust enabled

•	Claims Provider Trust disabled

•	Claims Provider Trust changed

New built-in searches:

•	All Authentication Method events in the last 30 days

•	All Relying Party Trust events in the last 30 days

•	All Endpoint events in the last 30 days

•	All Claims Provider Trust events in the last 30 days

•  이전
• Viewing Topics 1 - 4 of 71
• 다음 

이 문서 검색 이 제품 버전에 대한 모든 문서 검색 이 제품에 대한 모든 문서 검색 모든 문서 검색

셀프 서비스 도구

지식 기반

공지 및 알림

제품 지원

소프트웨어 다운로드

기술 설명서

사용자 포럼

비디오 자습서

RSS 피드

문의처

라이센싱 지원가져오기

기술 지원

모두 보기

×

 지원 시작

계열사 지원 사이트에서 Quest *제품*에 대한 온라인 지원 도움말을 볼 수 있습니다. 올바른 *제품* 지원 콘텐츠 및 지원에 연결하려면 계속을 클릭하십시오.

관련 문서

The document was helpful.

평가 결과 선택

I easily found the information I needed.

평가 결과 선택

© ALL RIGHTS RESERVED. Feedback 이용 약관 개인정보 보호정책 Cookie Preference Center