Chat now with support
Chat with Support

Quest has tools and processes in place to identify, protect, detect, and remediate vulnerabilities and incidents when they occur, including external security partners. As part of our standard security operations, Quest does not use CrowdStrike in any of our operations. We are reviewing our third parties, and so far, there is minimal affect. It is Quest's policy not to provide further technical details unless they directly impact customer data.

Change Auditor 7.4 - Office 365 and Azure Active Directory Event Reference Guide

Azure Active Directory Sign-in Risk Event

Change Auditor audits activities in the Azure Active Directory that correspond to the events in the Risky sign-ins report in the Azure Active Directory portal.

Table 22. Azure Active Directory Sign-in risk events
Event
Description
Severity

Active risk event detected

Created when a new risk event is detected with an active state.

High

Active risk event status changed to closed

Created when an active risk event is closed as a result of being marked as:

•
Resolved: The issue has been addressed and has been safely closed.
•
False positive: The issue has been incorrectly identified as a risk and has been safely closed.
•
Ignore: The issue has been removed from the active list.

This event helps you to understand why a risk event has been manually closed.

Low

Closed risk event status changed to active

Created when a closed risk event is reactivated.

High

Closed risk event detected

 

Created when a new risk event is detected with a closed state. This can happen if the risk event has been marked as resolved, a false positive, set to ignore, closed (remediated), closed (login blocked), closed (automatic multi-factor authentication), or closed (multiple reasons) before it has been detected by Change Auditor for the first time.

Low

Our brand, our vision. Together.

Our logo reflects our story: innovation, community and support. An important part of this story begins with the letter Q. It is a perfect circle, representing our commitment to technological precision and strength. The space in the Q itself symbolizes our need to add the missing piece — you — to the community, to the new Quest.

Contacting Quest

For sales or other inquiries, visit www.quest.com/contact.

Technical support resources

Technical support is available to Quest customers with a valid maintenance contract and customers who have trial versions. You can access the Quest Support Portal at https://support.quest.com.

The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. The Support Portal enables you to:

•
Submit and manage a Service Request.
•
View Knowledge Base articles.
•
Sign up for product notifications.
•
Download software and technical documentation.
•
View how-to-videos.
•
Engage in community discussions.
•
Chat with support engineers online.
•
View services to assist you with your product.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating