Change Auditor 7.5 - User Guide

Change Auditor for Defender

Change Auditor for Defender

The Change Auditor for Defender book contains information about the features available for Defender auditing. It contains the following topics:

•	Change Auditor for Defender Overview: This section provides an overview of Defender auditing as well as the system requirements.

•	Getting Started: This section provides information on deployment requirements and troubleshooting.

•	Defender Searches/Reports: This section explains how to run a built-in Defender reports. It also provides a description of the additional details that are provided on the Search Results page and Event Details pane.

 

Change Auditor for Defender Overview

Change Auditor for Defender Overview

•	Introduction

•	Deployment requirements

Introduction

Introduction

Defender enhances security by enabling two-factor authentication to network, web, and applications-based resources. It is designed to base all administration and identity management on an organization’s existing investment in Active Directory and eliminate the costs and time involved in setting up and maintaining proprietary databases. In addition, Defender works with any OATH-compliant hardware token enabling organizations to select the most appropriate token for their users. By leveraging an organization’s existing investment in Active Directory and supporting multiple token vendors, Defender enables organizations to increase security and achieve and sustain compliance in a cost-effective manner.

Specifically, Defender auditing:

•	Captures critical changes to Defender’s administration and usage to ensure it is always available. Detailed information is provided on who, what, when, and where change events. Original and current values for all changes are also provided.

•	Alerts, audits, and reports on critical changes made by administrators in real time (including adding, deleting, or modifying user accounts, back-end configurations and security settings).

•	Notifies organizations of changes to important items or patterns of changes.

•	Reduces the risk of downtime and misconfiguration with reports that enable you to address system communication concerns.

•	Enables continuous compliance and security auditing across your Microsoft enterprise.

This guide has been prepared to assist you in becoming familiar with Change Auditor for Defender. It is intended for network administrators, consultants, analysts, and any other IT professionals using the product.

•	For information on the core functionality available in Change Auditor, see the Change Auditor User Guide and the Change Auditor Installation Guide.

•	For event details, see the Change Auditor for Defender Event Reference Guide.

Deployment requirements

Deployment requirements

For a successful deployment, ensure that your environment meets the minimum system requirements. For information on system requirements, see the Change Auditor Release Notes. For details on installing Change Auditor, see the Change Auditor Installation Guide.

NOTE: Defender auditing is only available if you have licensed Change Auditor for Active Directory. If you do not have a valid license you can use the features, however, associated events are not captured. To verify that it is licensed, right-click the coordinator icon in the system tray and select Licensing.