Chat now with support
Chat with Support

Change Auditor 7.0.4 - Whats New

What's New in Change Auditor 7.0.4 What's New in Change Auditor 7.0.3 What's New in Change Auditor 7.0.2 What's New in Change Auditor 7.0.1 What's New in Change Auditor 7.0 What's New in Change Auditor 6.9.5 What's New in Change Auditor 6.9.4 What's New in Change Auditor 6.9.3 What's New in Change Auditor 6.9.2 What's New in Change Auditor 6.9.1 What's New in Change Auditor 6.9

Additional coordinator status information

•
The Coordinator status page now provides the available free space in the coordinator database.
•
The Coordinator status page now provides the public SDK port (the port number assigned for external applications to access the coordinator) and the agent port (the port number assigned to the agents to communicate with the coordinator).

What's New in Change Auditor 6.9.4

What’s New in Change Auditor 6.9.4

As a result of ongoing research and development, and in response to customer feedback, the following enhancements have been made in this release of Quest Change Auditor.

Additional platform support

The following support has been added:

•
Microsoft SQL Server 2014 SP2 for Skype for Business auditing
•
Change Auditor client screen resolution 1280 x 800 with at least 256 colors
•
IT Security Search 11.3
•
EMC Unity 4.1.0

New Azure Active Directory events

* 
IMPORTANT: To capture sign-in risk events, you need to create a new template and select the Sign-ins option. These events are not captured automatically by an existing Azure Active Directory template.

The following events have been added.

Table 1. Azure Active Directory User events
Event
This event is triggered when....

Failed Azure Active Directory
sign-in 

A user fails to sign-in to an application. The event details show the user whose attempt failed, their location, and the application they attempted to access.

Successful Azure Active Directory sign-in

A user successfully signs-in to an application. The event details show the user whose attempt failed, their location, and the application they attempted to access.

Azure Active Directory - sign-in event

 

Sign-in activity is detected that does not have a corresponding event defined in Change Auditor.

Active risk event detected

An event occurs that could indicate a compromised user account.

Active risk event status changed to closed

An active risk event is closed as a result of being marked as:

•
Resolved: The issue has been addressed and has been safely closed.
•
False positive: The issue has been incorrectly identified as a risk and has been safely closed.
•
Ignore: The issue has been removed from the active list.

This event helps you to understand why a risk event has been manually closed.

Closed risk event status changed to active

A closed risk event is reactivated.

Closed risk event detected

 

A risk event is detected in a closed state. It has been marked as resolved, a false positive, set to ignore, closed (remediated), closed (login blocked), closed (automatic multi-factor authentication), or closed (multiple reasons).

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating