Chat now with support
Chat with Support

Change Auditor 7.0.4 - Whats New

What's New in Change Auditor 7.0.4 What's New in Change Auditor 7.0.3 What's New in Change Auditor 7.0.2 What's New in Change Auditor 7.0.1 What's New in Change Auditor 7.0 What's New in Change Auditor 6.9.5 What's New in Change Auditor 6.9.4 What's New in Change Auditor 6.9.3 What's New in Change Auditor 6.9.2 What's New in Change Auditor 6.9.1 What's New in Change Auditor 6.9

Ability to forward event to third party tools

Change Auditor administrators can configure Change Auditor to send events to a third party tool using webhook technology. This technology allows you to integrate Change Auditor with SIEM tools or any other tool that accepts webhook notifications.

Currently, you can create and manage a subscription for managed and unmanaged Splunk Cloud and Splunk Enterprise editions through the Change Auditor client.

PowerShell commands are available to configure event forwarding to IBM QRadar (on premises deployments) and Micro Focus Security ArcSight Logger. These commands are in preview mode for this release.

* 
NOTE: The connection between Change Auditor and ArcSight/QRadar does not currently support TLS/SSL for secured connections. Only unsecured connections are supported for the preview release of event forwarding to ArcSight and QRadar.

Enhanced data security between the SQL Server and the coordinator

During coordinator configuration, you can select to use SSL encryption for all data sent between the coordinator and the SQL server. To use this option, the SQL server must have a certificate installed and the format of the SQL server name specified must be an exact match to the name format used in the certificate (for example FQDN or NetBios).

Ability to manage Active Directory protection with PowerShell commands

The following commands have been added to enable you to manage Active Directory protection templates:

•
New-CAADProtectionTemplate for creating an Active Directory protection template.
•
New-CAProtectedObject for creating a protected object to include in a protection template.
•
New-CAScheduledTimeRange for scheduling when to enforce the protection.
•
Get-CAADProtectionTemplates for listing existing Active Directory protection templates.
•
Remove-CAADProtectionTemplate for removing an Active Directory protection template.

Ability to identify Read-Only Domain Controllers

Ability to identify Read-Only Domain Controllers

Through the Deployment page you can:

•
Select to include a column that shows if the domain controller is read-only.
•
Select to display only read-only domain controllers in the forest.
•
Configure how to handle auto-deployment and read-only domain controllers. If you enable the option ‘Do Not Deploy on Read-Only DCs’, when a read-only domain controller is added to the domain, the agent is not installed on it. By default, this is disabled so when a read-only domain controller is added to the domain, the agent is installed on it.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating