Chat now with support
Chat with Support

Change Auditor Threat Detection 7.3 - Deployment Guide

Threat Detection configuration commands

•
Adding the PowerShell module
•
Viewing available commands and help
•
Connecting to Change Auditor
•
Managing a Threat Detection configuration

 

 

 

Adding the PowerShell module

Change Auditor comes with a PowerShell module for you to use to manage your Threat Detection deployment. It is installed when you install the Windows client or a coordinator.

* 
NOTE: Windows PowerShell version 3.0 or higher is required.
To import the Change Auditor PowerShell module:
1
Open a Windows PowerShell window and type the following at the Windows PowerShell command prompt:
Import-Module <path>
Where "<path>" is the file path for the ChangeAuditor.PowerShell.dll assembly found in the Change Auditor Windows client or Change Auditor coordinator folder.
2
To ensure that the module was added, type the following at the Windows PowerShell command prompt:
Get-Module -All
The registered PowerShell modules are listed.

Viewing available commands and help

•
To view all available Change Auditor commands, enter:
Get-Command -Module ChangeAuditor.PowerShell
•
To view help on each command including the syntax, enter:
Get-Help cmdletName
•
To view an interactive command browser that shows you the layout of commands and the help for the commands, enter:
Show-Command cmdletName

Threat Detection sample scripts

Change Auditor includes the following sample scripts to help you configure and manage Threat Detection:

•
CreateThreatDetectionConfiguration.ps1
•
GetThreatDetectionConfiguration.ps1
•
ModifyThreatDetectionConfiguration.ps1
•
RemoveThreatDetectionConfiguration.ps1
•
UpdateThreatDetectionServer.ps1

 

* 
NOTE: By default they are located here: C:\Program Files\Quest\ChangeAuditor\Client\PowerShell Sample Scripts
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating