Chat now with support
Chat with Support

Change Auditor 7.2 - Whats New

What's New in Change Auditor 7.2 What's New in Change Auditor 7.1.1 What's New in Change Auditor 7.1 What's New in Change Auditor 7.0.4 What's New in Change Auditor 7.0.3 What's New in Change Auditor 7.0.2 What's New in Change Auditor 7.0.1 What's New in Change Auditor 7.0

Change Auditor and On Demand Audit integration

Quest On Demand Audit is a Software as a Service (SaaS) application, available through quest-on-demand.com that provides extensive, customizable auditing of critical activities and detailed alerts about vital changes taking place in Microsoft Office 365 and Azure Active Directory.

By integrating with Change Auditor and sending Active Directory event data to On Demand Audit, you can gain visibility into on premise changes (including events gathered up to 30 days prior to installing or upgrading Change Auditor 7.0).

You will gain access to:

•
Granular, delegated access to tenants, workloads, and reports.
•
Interactive, rich visualizations of on-premises and cloud events.
•
Responsive search across tenants that delivers immediate results.
•
Long-term storage of audit data.

Azure Active Directory and Office 365 enhancements

•
The following Exchange Online events have been added:
•
Calendar delegation added to online mailbox by owner
•
Calendar delegation removed from online mailbox by owner
•
File synchronized from OneDrive for Business to a local OneDrive folder event
•
File synchronized from a local OneDrive folder to OneDrive for Business event
•
Folder permissions added in online mailbox by owner
•
Folder permissions added in online mailbox by non-owner
•
Folder permissions added in online shared mailbox
•
Folder permissions modified in online mailbox by owner
•
Folder permissions modified in online mailbox by non-owner
•
Folder permissions modified in online shared mailbox
•
Folder permissions removed in online mailbox by owner
•
Folder permissions removed in online mailbox by non-owner
•
Folder permissions removed in online shared mailbox
•
Inbox rule added to online mailbox by owner
•
Inbox rule added to online mailbox by non-owner
•
Inbox rule added in online shared mailbox
•
Inbox rule modified in online mailbox by owner
•
Inbox rule modified in online mailbox by non-owner
•
Inbox rule modified in online shared mailbox
•
Inbox rule removed from online mailbox by owner
•
Inbox rule removed from online mailbox by non owner
•
Inbox rule removed from online shared mailbox
•
The following SharePoint Online events have been added:
•
Group member added in SharePoint Online
•
Group member removed in SharePoint Online
•
Member added to group in SharePoint Online
•
Member removed from group in SharePoint Online
•
Ability to specify the generic events to exclude from auditing based on their operations. (The Office 365 OneDrive for Business event, Office 365 SharePoint Online event, and Office 365 Exchange Online event are generic dynamically constructed events created when associated activity is detected that does not have a corresponding event defined in Change Auditor.)
•
Ability to search on the group membership changes for SharePoint Online and OneDrive by specifying the group or member.
•
Audit event columns added so that both target and subject (secondary target) display names can be included in a search.
•
Azure - Subject Sync Type
•
Azure - Subject Display Name
•
Azure - On-premises Subject
•
Subject Name
•
Ability to use subject as search criteria in the "Target" field for Azure Active Directory searches.

Threat Detection enhancements

•
Ability to upgrade your existing Threat Detection server through PowerShell using the Update-CAThreatDetectionServer command.
•
High risk user details are displayed in the Threat Detection dashboard including their photo, display or logon name, job title, department, and their address. When investigating a user or an alert for a specific user, you will also see details such email and their manager’s email address, department, and office.
•
Local date and time is displayed in the Threat Detection dashboard.

Additional internal events

•
Events to track changes to Application user interface role definitions, task definitions, and application groups.
•
Event generated when a purge and archive jobs fail.
•
Events to track changes to Splunk, QRadar, ITSS and ArcSight subscriptions.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating