Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Change Auditor 7.1.1 - Whats New

Table of Contents

What's New in Change Auditor 7.1.1

Additional Office 365 Exchange Online mailbox events Enhanced security auditing Search enhancements SIEM tool integration improvements Ability to audit and protect the Active Directory Database Ability to audit Active Directory Federation Services Foreign forest support Authentication enhancements Additional platform support Miscellaneous features and enhancements

What's New in Change Auditor 7.1

Azure Active Directory and Office 365 updates Active Directory updates Foreign forest support On Demand Audit integration updates Authentication and Logon activity updates Additional platform support Miscellaneous features and enhancements

What's New in Change Auditor 7.0.4

Foreign forest support Additional internal events Azure Active Directory and Office 365 updates Threat Detection enhancements SIEM subscription updates and enhancements Additional platform support Miscellaneous features and enhancements

What's New in Change Auditor 7.0.3

Change Auditor and On Demand Audit integration Azure Active Directory and Office 365 enhancements Threat Detection enhancements Additional internal events Additional platform support Miscellaneous features and enhancements

What's New in Change Auditor 7.0.2

Threat Detection updates and enhancements SIEM subscription updates and enhancements Additional PowerShell commands Ability to search based on authentication type and port Enhanced security between Change Auditor components (FIPS compliance) Azure Active Directory and Office 365 enhancements Additional platform support Miscellaneous features and enhancements

What's New in Change Auditor 7.0.1

GDPR built-in reports SIEM tool integration improvements Azure Active Directory auditing improvements Active Directory auditing improvements Improved tracking of changes to searches Additional platform support Email alert improvements Office 365 Exchange Online search improvements Miscellaneous enhancements and updates

What's New in Change Auditor 7.0

Updated license format Ability to forward event to third party tools Enhanced data security between the SQL Server and the coordinator Ability to manage Active Directory protection with PowerShell commands Ability to identify Read-Only Domain Controllers Search enhancements New built-in searches Additional platform support Miscellaneous enhancements and updates

What's New in Change Auditor 6.9.5

Additional platform support Ability to configure agents to function with proxy servers Enhanced ability to share and save search results Additional coordinator status information

What's New in Change Auditor 6.9.4

Additional platform support New Azure Active Directory events New built-in searches

What's New in Change Auditor 6.9.3

Additional platform support Generic Office 365 and Azure Active Directory events Azure Active Directory Auditing Wizard New Azure Active Directory events Additional Office 365 and Azure Active Directory event details Search improvements

What's New in Change Auditor 6.9.2

Additional platform support Office 365 auditing configuration and subsystem updates Office 365 SharePoint Online events Office 365 OneDrive for Business Additional internal events and built-in reports Updated Office 365 PowerShell commands New Azure Active Directory events New Office 365 and Azure Active Directory auditing guides

What's New in Change Auditor 6.9.1

Additional platform support Ability to search on selected mailboxes when creating and editing an Office 365 Exchange Online template Additional Office 365 Exchange Online internal events and built-in reports Additional Azure Active Directory events Additional Active Directory custom user monitoring events Azure Active Directory and Office 365 Exchange Online historical event collection Ability to detect Skype for Business agent status and configuration

What's New in Change Auditor 6.9

Additional platform support Office 365 Exchange Online auditing Azure Active Directory auditing Skype for Business auditing New PowerShell capabilities IT Security Search System requirement changes in Change Auditor 6.9 Miscellaneous

What's New in Change Auditor 6.9.4

What’s New in Change Auditor 6.9.4

As a result of ongoing research and development, and in response to customer feedback, the following enhancements have been made in this release of Quest Change Auditor.

Additional platform support

The following support has been added:

•

Microsoft SQL Server 2014 SP2 for Skype for Business auditing

•

Change Auditor client screen resolution 1280 x 800 with at least 256 colors

•

IT Security Search 11.3

•

EMC Unity 4.1.0

New Azure Active Directory events


	IMPORTANT: To capture sign-in risk events, you need to create a new template and select the Sign-ins option. These events are not captured automatically by an existing Azure Active Directory template.

The following events have been added.

Table 1. Azure Active Directory User events

This event is triggered when....

Failed Azure Active Directory
sign-in

A user fails to sign-in to an application. The event details show the user whose attempt failed, their location, and the application they attempted to access.

Successful Azure Active Directory sign-in

A user successfully signs-in to an application. The event details show the user whose attempt failed, their location, and the application they attempted to access.

Azure Active Directory - sign-in event

Sign-in activity is detected that does not have a corresponding event defined in Change Auditor.

Active risk event detected

An event occurs that could indicate a compromised user account.

Active risk event status changed to closed

An active risk event is closed as a result of being marked as:

•

Resolved: The issue has been addressed and has been safely closed.

•

False positive: The issue has been incorrectly identified as a risk and has been safely closed.

•

Ignore: The issue has been removed from the active list.

This event helps you to understand why a risk event has been manually closed.

Closed risk event status changed to active

A closed risk event is reactivated.

Closed risk event detected

A risk event is detected in a closed state. It has been marked as resolved, a false positive, set to ignore, closed (remediated), closed (login blocked), closed (automatic multi-factor authentication), or closed (multiple reasons).

New built-in searches

The following built-in reports have been added to help you quickly get a sense of the activity within your Azure Active Directory deployment:

•

All Azure Active Directory events in the past 7 days

•

All Azure Active Directory events in the past 7 days by activity

•

All Azure Active Directory sign-ins in the last 24 hours

•

All Azure Active Directory risk event changes in the past 7 days

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center