The Azure Knowledge Pack for InTrust helps you extend your auditing scope to your Azure-based resources. Using the familiar InTrust Deployment Manager workflow with minor adjustments, you can collect the following:
- Events from Windows virtual machines hosted in Azure
- Events that originate in Azure and are directed to Event Hubs
- This distribution of the Azure Knowledge Pack is a technical preview with known limitations and issues, which are noted in the documentation. Quest appreciates your feedback on the available functionality and will try hard to complete the solution and align it with your expectations.
- In the final release of the Azure Knowledge Pack, the workflow will be more streamlined and auditing of a variety of other Azure resources will be supported, including the Azure portal permission and role assignments and Managed SQL. Please check the documentation at https://support.quest.com/technical-documents/intrust/11.4.1/auditing-microsoft-azure