Chat now with support
Chat with Support

Change Auditor 7.1.1 - Whats New

What's New in Change Auditor 7.1.1 What's New in Change Auditor 7.1 What's New in Change Auditor 7.0.4 What's New in Change Auditor 7.0.3 What's New in Change Auditor 7.0.2 What's New in Change Auditor 7.0.1 What's New in Change Auditor 7.0 What's New in Change Auditor 6.9.5 What's New in Change Auditor 6.9.4 What's New in Change Auditor 6.9.3 What's New in Change Auditor 6.9.2 What's New in Change Auditor 6.9.1 What's New in Change Auditor 6.9

Azure Active Directory and Office 365 updates

•
Change Auditor has implemented the updated Microsoft graph API which has resulted in the following additional built-in reports for risky events:
•
All Azure Active Directory sign-in from anonymous IP address events in the past 7 days
•
All Azure Active Directory sign-in from confirmed compromised user events in the past 7 days
•
All Azure Active Directory sign-in from IP address with malicious activity events in the past 7 days
•
All Azure Active Directory sign-in from IP address with suspicious activity events in the past 7 days
•
All Azure Active Directory sign-in from malware-infected device events in the past 7 days
•
All Azure Active Directory sign-in with impossible travel events in the past 7 days
•
All Azure Active Directory sign-in with valid credentials from blocked IP address events in the past 7 days
•
All Azure Active Directory sign-in with unfamiliar location or properties events in the past 7 days
•
All Azure Active Directory suspicious manipulation or rules in user's inbox events in the past 7 days
•
All Azure Active Directory user activity with known sign-in attack pattern events in the past 7 days
•
All Azure Active Directory user activity with known attack pattern events in the past 7 days
•
All Azure Active Directory unlikely travel between sign-in source locations events in the past 7 days
•
All Azure Active Directory users sign-in with leaked credentials events in the past 7 days
•
Increased performance of Azure Active Directory auditing allowing for more events to be processed.
•
Office 365 auditing page now displays whether SharePoint Online and OneDrive for Business events are being monitored.
•
Office 365 event details Item tab added that displays Id, rights, SID, Upn, name and path details for Exchange Online permission additions, removals, or modifications.
•
Additional Info tab added for Azure Active Directory risky events that displays information such as user agent, related event time in UTC, related user agent, device information, related location, request ID, correlation ID.
•
Ability to set whether or not mailbox auditing settings specified in the auditing template overwrite the existing mailbox auditing settings specified in the Office 365 tenant.
•
Ability to create a custom Azure Active Directory search based on location.

Active Directory updates

•
Ability to audit changes to Active Directory temporary groups where the members have a specified time to live. The time to live for each member is also reported in the event.
•
Ability to allow Managed Service Accounts to access protected Active Directory objects.

Foreign forest support

The following is supported in environments where a coordinator does not exist in the foreign forest where agents are deployed:

•
Ability to harvest the foreign forest topology.
•
Ability to deploy agents through the Change Auditor client.
•
Ability to audit logon activity with an agent in the foreign forest.
•
Ability to audit and protect Windows File System with an agent in the foreign forest.
•
Ability to audit and protect Active Directory objects with an agent in the foreign forest.
•
Ability to audit Active Directory attributes with an agent in the foreign forest.
•
Ability to select objects from the foreign forest in object pickers for search queries.
•
Ability to include and exclude objects from the foreign forest in AD queries.

On Demand Audit integration updates

•
Ability to send the Change Auditor version and list of coordinators to On Demand Audit after an upgrade so that On Demand Audit can display the most current Change Auditor information.
•
New events generated when event forwarding to On Demand Audit is suspended due to an error and then resumed:
•
On Demand Audit subscription has suspended
•
On Demand Audit subscription has resumed
•
New events generated when an On Demand administrator makes changes to the Change Auditor event forwarding settings within On Demand Audit:
•
Event sending to On Demand Audit paused
•
Event sending to On Demand Audit resumed
•
On Demand Audit configuration removed
•
New event generated when Change Auditor connects to On Demand Audit:
•
On Demand Audit configuration added
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating