Chat now with support
Chat with Support

Change Auditor 7.3 - Whats New

What's New in Change Auditor 7.3 What's New in Change Auditor 7.2 What's New in Change Auditor 7.1.1 What's New in Change Auditor 7.1 What's New in Change Auditor 7.0.4 What's New in Change Auditor 7.0.3 What's New in Change Auditor 7.0.2 What's New in Change Auditor 7.0.1 What's New in Change Auditor 7.0

Miscellaneous features and enhancements

•
Share added, share deleted, and share edited events are generated when the New-SMBShare, Remove-SMBShare, and Set-SMBShare commands are run. The events are also generated when using Server Manager File and Storage Services add share task and “Stop Sharing" and "Properties" context menus.
•
New Active Directory email tags for the reason and status for failed Active Directory events. (AD_STATUS_CODE and AD_FAILURE_REASON)
•
Ability to see the license number for all applied licenses.
•
The authentication certificates used to authentication with On Demand Audit will automatically renew as required.
•
Office 365 Exchange Online events no longer display Microsoft deprecated events.
•
Improved alert query performance.
•
A user object's UserPrincipalName is now updated immediately following modification for enhanced reporting.
•
Event generated when coordinators specified to handle scheduled purge, archive, and report jobs are unavailable: All specified coordinators that handle purge/archive/report jobs are unavailable.

What's New in Change Auditor 7.1

What’s New in Change Auditor 7.1

As a result of ongoing research and development, and in response to customer feedback, the following enhancements have been made in this release of Quest Change Auditor.

•
Azure Active Directory and Office 365 updates
•
Active Directory updates
•
Foreign forest support
•
On Demand Audit integration updates
•
Authentication and Logon activity updates
•
Additional platform support
•
Miscellaneous features and enhancements

Azure Active Directory and Office 365 updates

•
Change Auditor has implemented the updated Microsoft graph API which has resulted in the following additional built-in reports for risky events:
•
All Azure Active Directory sign-in from anonymous IP address events in the past 7 days
•
All Azure Active Directory sign-in from confirmed compromised user events in the past 7 days
•
All Azure Active Directory sign-in from IP address with malicious activity events in the past 7 days
•
All Azure Active Directory sign-in from IP address with suspicious activity events in the past 7 days
•
All Azure Active Directory sign-in from malware-infected device events in the past 7 days
•
All Azure Active Directory sign-in with impossible travel events in the past 7 days
•
All Azure Active Directory sign-in with valid credentials from blocked IP address events in the past 7 days
•
All Azure Active Directory sign-in with unfamiliar location or properties events in the past 7 days
•
All Azure Active Directory suspicious manipulation or rules in user's inbox events in the past 7 days
•
All Azure Active Directory user activity with known sign-in attack pattern events in the past 7 days
•
All Azure Active Directory user activity with known attack pattern events in the past 7 days
•
All Azure Active Directory unlikely travel between sign-in source locations events in the past 7 days
•
All Azure Active Directory users sign-in with leaked credentials events in the past 7 days
•
Increased performance of Azure Active Directory auditing allowing for more events to be processed.
•
Office 365 auditing page now displays whether SharePoint Online and OneDrive for Business events are being monitored.
•
Office 365 event details Item tab added that displays Id, rights, SID, Upn, name and path details for Exchange Online permission additions, removals, or modifications.
•
Additional Info tab added for Azure Active Directory risky events that displays information such as user agent, related event time in UTC, related user agent, device information, related location, request ID, correlation ID.
•
Ability to set whether or not mailbox auditing settings specified in the auditing template overwrite the existing mailbox auditing settings specified in the Office 365 tenant.
•
Ability to create a custom Azure Active Directory search based on location.

Active Directory updates

•
Ability to audit changes to Active Directory temporary groups where the members have a specified time to live. The time to live for each member is also reported in the event.
•
Ability to allow Managed Service Accounts to access protected Active Directory objects.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating