Tchater maintenant avec le support
Tchattez avec un ingénieur du support

Change Auditor 7.4 - Built-in Reports Reference Guide

Introduction Built-in reports
Active Directory Federation Services AD Query All Events Authentication Services Azure Active Directory Defender Office 365 Logon Activity Skype for Business Recommended Best Practices Regulatory Compliance
FISMA (Federal Information Security Management Act)
NIST SP 800-53 | Technical Controls | Accountability (Including Audit Trails) | A01 – User Association NIST SP 800-53 | Technical Controls | Accountability (Including Audit Trails) | A02 – Content of Audit Records NIST SP 800-53 | Technical Controls | Accountability (Including Audit Trails) | A03 – Auditable Events NIST SP 800-53 | Technical Controls | Accountability (Including Audit Trails) | A04 – Audit Processing NIST SP 800-53 | Technical Controls | Identification and Authentication | IA02 – Remote, Privileged Access Authentication NIST SP 800-53 | Technical Controls | Identification and Authentication | IA03 – Password Protection Mechanisms NIST SP 800-53 | Technical Controls | Identification and Authentication | IA04 – Password Life NIST SP 800-53 | Technical Controls | Identification and Authentication | IA05 – Password Content NIST SP 800-53 | Technical Controls | Identification and Authentication | IA12 – Remote Access Identification Authentication NIST SP 800-53 | Technical Controls | Identification and Authentication | IA16 – Password Management NIST SP 800-53 | Technical Controls | Logical Access Control | AC01 - Remote Access Restrictions NIST SP 800-53 | Technical Controls | Logical Access Control | AC02 - Logon Notification Message NIST SP 800-53 | Technical Controls | Logical Access Control | AC05 - Session Inactivity NIST SP 800-53 | Technical Controls | Logical Access Control | AC06 - Limited Connection Time NIST SP 800-53 | Technical Controls | Logical Access Control | AC09 - Enforcement Mechanisms NIST SP 800-53 | Technical Controls | Logical Access Control | AC10 - Automated Account Controls NIST SP 800-53 | Technical Controls | Logical Access Control | AC12 - Supervision and Review NIST SP 800-53 | Technical Controls | Logical Access Control | AC14 - Authorization Procedures NIST SP 800-53 | Technical Controls | System and Communications Protection | SP02 - Information System Partitioning NIST SP 800-53 | Technical Controls | System and Communications Protection | SP04 - Denial of Service Protection NIST SP 800-53 | Technical Controls | System and Communications Protection | SP05 - Resource Priority NIST SP 800-53 | Technical Controls | System and Communications Protection | SP06 - Boundary Protection NIST SP 800-53 | Technical Controls | System and Communications Protection | SP07 - Network Segregation NIST SP 800-53 | Technical Controls | System and Communications Protection | SP09 - Network Disconnect NIST SP 800-53 | Technical Controls | System and Communications Protection | SP11 - Trust Path NIST SP 800-53 | Technical Controls | System and Communications Protection | SP16 - Use of Encryption
GLBA (Gramm-Leach-Bliley Act) GDPR HIPAA (Health Insurance Portability and Accountability Act) Payment Card Industry SAS 70 (Statement on Auditing Standards, Service Organizations) SOX (Sarbanes-Oxley General IT Controls Evidence based on the COBIT Framework)
Security SharePoint SQL Data Level SQL Extended Events Threat Detection

NIST SP 800-53 | Technical Controls | Identification and Authentication | IA05 – Password Content

NIST SP 800-53 ||| IA05 – Password Content
(Executive Summary) IA05 - Password Content

A summary report containing events from all of the following reports.

IA05 – Detailed list of password complexity policy modifications
Who = All Users
What = Password Must Meet Complexity Requirements Policy Changed
Where = All sources
When = Last 7 days
Origin = All workstations/servers
IA05 – Detailed list of password history policy modifications
Who = All Users
What = Enforce Password History Policy Changed
Where = All sources
When = Last 7 days
Origin = All workstations/servers

NIST SP 800-53 | Technical Controls | Identification and Authentication | IA12 – Remote Access Identification Authentication

NIST SP 800-53 ||| IA12 – Remote Access Identification Authentication
IA12 – Detailed list of dial-in modifications
Who = All Users
What = User Dial-in Static Route Added; User Dial-in Static Route Removed; User Dial-in Callback Options Changed; User Dial-in Static IP Address Changed; User Dial-in Remote Access Permission Changed; User Dial-in Verify Caller ID Changed
Where = All sources
When = Last 7 days
Origin = All workstations/servers

NIST SP 800-53 | Technical Controls | Identification and Authentication | IA16 – Password Management

NIST SP 800-53 ||| IA16 – Password Management
(Executive Summary) IA016 - Password Management

A summary report containing events from all of the following reports.

IA16 – Detailed list of account lockout policy modifications
Who = All Users
What = Account Lockout Threshold Policy Changed
Where = All sources
When = Last 7 days
Origin = All workstations/servers
IA16 – Detailed list of lockout duration policy modifications
Who = All Users
What = Account Lockout Duration Policy Changed
Where = All sources
When = Last 7 days
Origin = All workstations/servers
IA16 – Detailed list of password age policy modifications
Who = All Users
What = Minimum Password Age Policy Changed; Maximum Password Age Policy Changed
Where = All sources
When = Last 7 days
Origin = All workstations/servers
IA16 – Detailed list of password complexity policy modifications
Who = All Users
What = Password Must Meet Complexity Requirements Policy Changed
Where = All sources
When = Last 7 days
Origin = All workstations/servers
IA16 – Detailed list of password history policy modifications
Who = All Users
What = Enforce Password History Policy Changed
Where = All sources
When = Last 7 days
Origin = All workstations/servers
IA16 – Detailed list of storing passwords policy modifications
Who = All Users
What = Store Passwords Using Reversible Encryption Policy Changed
Where = All sources
When = Last 7 days
Origin = All workstations/servers

NIST SP 800-53 | Technical Controls | Logical Access Control | AC01 - Remote Access Restrictions

NIST SP 800-53 ||| AC01 - Remote Access Restrictions
AC01 – Detailed list of dial-in modifications
Who = All Users
What = User Dial-in Static Route Added; User Dial-in Static Route Removed; User Dial-in Callback Options Changed; User Dial-in Static IP Address Changed; User Dial-in Remote Access Permission Changed; User Dial-in Verify Caller ID Changed
Where = All sources
When = Last 7 days
Origin = All workstations/servers
Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation