Change Auditor for Defender 6.9.5 - Event Reference Guide

Introduction

Defender enhances security by enabling two-factor authentication to network, Web, and applications-based resources. It is designed to base all administration and identity management on an organization’s existing investment in Active Directory and eliminate the costs and time involved in setting up and maintaining proprietary databases. In addition, Defender works with any OATH-compliant hardware token enabling organizations to select the most appropriate token for their users. By leveraging an organization’s existing investment in Active Directory and supporting multiple token vendors, Defender enables organizations to increase security and achieve and sustain compliance in a cost-effective manner.

Because Defender extends the Active Directory schema, once the Change Auditor for Defender license is applied, agents installed on Domain Controllers will detect any changes made to the Defender-specific attributes in Active Directory and generate events. No audit template is needed.

This document lists the events that can be captured by Change Auditor for Defender. Separate event reference guides are provided that list the core Change Auditor events (when any Change Auditor license is applied) and the events captured when the different auditing modules are licensed.


Was this topic helpful?

[Select Rating]



Change Auditor for Defender Events

This sectionlists the audited events captured by Change Auditor for Defender. They are listed in alphabetical order by facility.


Was this topic helpful?

[Select Rating]



Defender

Defender Access Node Added

Created when a new Defender access node is added in a domain.

Medium

Defender Access Node Removed

Created when a Defender access node is removed from a domain.

Medium

Defender License Added

Created when a Defender license is added.

Medium

Defender License Removed

Created when a Defender license is removed.

Medium

Defender License Usage Changed

Created when the Defender license usage value is changed.

Medium

Defender Password Changed

Created when a Defender password is changed for a user.

Medium

Defender Password Cleared

Created when a Defender password is cleared for a user.

Medium

Defender Password Expiry Cleared

Created when the Defender password expiry setting is cleared for a user.

Medium

Defender Password Set

Created when a Defender password was set for a user.

Medium

Defender Policy Added

Created when a new Defender policy is added in a domain.

Medium

Defender Policy Changed for Access Node

Created when a Defender policy for an access node is changed.

Medium

Defender Policy Changed for Group

Created when a Defender policy for a group is changed.

Medium

Defender Policy Changed for Security Server

Created when a Defender policy for a security server is changed.

Medium

Defender Policy Changed for User

Created when a Defender policy for a user is changed.

Medium

Defender Policy Removed

Created when a Defender policy is removed from a domain.

Medium

Defender RADIUS Payload Added

Created when a new Defender RADIUS payload is added in a domain.

Medium

Defender RADIUS Payload Changed for Access Node

Created when a Defender RADIUS payload for an access node is changed.

Medium

Defender RADIUS Payload Changed for Group

Created when a Defender RADIUS payload for a group is changed.

Medium

Defender RADIUS Payload Changed for Security Server

Created when a Defender RADIUS payload for a security server is changed.

Medium

Defender RADIUS Payload Changed for User

Created when a Defender RADIUS payload for a user is changed.

Medium

Defender RADIUS Payload Removed

Created when a Defender RADIUS payload is removed from a domain.

Medium

Defender Security Server Added

Created when a Defender security server is added in a domain.

Medium

Defender Security Server Assigned to Access Node

Created when a Defender security server is assigned to an access node.

Medium

Defender Security Server Removed

Created when a Defender security server is removed from a domain.

Medium

Defender Security Server Unassigned to Access Node

Created when a Defender security server is unassigned to an access node.

Medium

Defender Token Added

Created when a new Defender token is added in a domain.

Medium

Defender Token Assigned

Created when a Defender token is assigned to a user.

Medium

Defender Token License Added

Created when a Defender token license is added.

Medium

Defender Token License Removed

Created when a Defender token license is removed.

Medium

Defender Token License Usage Changed

Created when a Defender token license usage value is changed.

Medium

Defender Token PIN Changed

Created when a PIN is changed for a Defender token assigned to a user.

Medium

Defender Token PIN Cleared

Created when a PIN is cleared for a Defender token assigned to a user.

Medium

Defender Token PIN Expiry Cleared

Created when a PIN is set to not expired for a Defender token assigned to a user.

Medium

Defender Token PIN Expiry Set

Created when a PIN is set to expired for a Defender token assigned to a user.

Medium

Defender Token PIN Set

Created when a PIN is set for a Defender token assigned to a user.

Medium

Defender Token Removed

Created when a Defender token is removed from a domain.

Medium

Defender Token Temporary Response Cleared

Created when a temporary response is cleared for a Defender token assigned to a user.

Medium

Defender Token Temporary Response Expiration Changed

Created when a temporary response’s expiration is changed for a Defender token assigned to a user

Medium

Defender Token Temporary Response Set

Created when a temporary response is set for a Defender token assigned to a user.

Medium

Defender Token Temporary Response Usage Changed

Created when a temporary response’s usage is changed for a Defender token assigned to a user

Medium

Defender Token Unassigned

Created when a Defender token is unassigned to a user.

Medium

Member Added to Access Node

Created when a member is added to an access node.

Medium

Member Removed from Access Node

Created when a member is removed from an access node.

Medium

User Reset Count Changed

Created when the reset count for a user is changed.

Medium

User Violation Count Changed

Created when the violation count for a user is changed.

Medium


Was this topic helpful?

[Select Rating]



Built-in Reports

Change Auditor provides predefined reports which allow you to quickly retrieve valuable change information from a variety of perspectives.

1
Click on the Searches tab or select the View | Searches menu command or Ctrl+F10 to open the Searches page.
Select the search definition and click the Run tool bar button at the top of the Searches page

The following built-in reports are available with Change Auditor for Defender:

 


Was this topic helpful?

[Select Rating]



Self Service Tools
Knowledge Base
Notifications & Alerts
Product Support
Software Downloads
Technical Documentation
User Forums
Video Tutorials
Contact Us
Licensing Assistance
Technical Support
View All
Related Documents