Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Quest has tools and processes in place to identify, protect, detect, and remediate vulnerabilities and incidents when they occur, including external security partners. As part of our standard security operations, Quest does not use CrowdStrike in any of our operations. We are reviewing our third parties, and so far, there is minimal affect. It is Quest's policy not to provide further technical details unless they directly impact customer data.

Change Auditor for SharePoint 7.4 - Event Reference Guide

Table of Contents

Introduction Change Auditor for SharePoint Events

SharePoint Document SharePoint Document Library SharePoint Farm SharePoint Folder SharePoint List SharePoint List Item SharePoint Permission SharePoint Security Group SharePoint Site SharePoint Site Collection

Log Events SharePoint Event Requirements

SharePoint Permission

Table 7. SharePoint Permission events
Event	Description	Severity
All permission levels revoked	Created when all permission levels are revoked.	High
Permission inheritance broken	Created when the permissions on a lower-level securable object is edited breaking the inheritance of permissions from the parent site.	Medium
Permission inheritance restored	Created when previously broken permission inheritance is restored between the parent site and a lower-level securable object.	Medium
Permission level created	Created when a new permission level is created for a SharePoint site collection.	High
Permission level deleted	Created when a permission level for a SharePoint site collection is deleted.	High
Permission level granted	Created when a permission level is granted for a principal or SharePoint group.	High
Permission level inheritance broken	Created when permission level inheritance is broken between the parent site and a lower-level securable object.	Medium
Permission level permissions modified	Created when the permissions associated with a permission level are modified.	High
Permission level revoked	Created when a permission level is revoked for a principal or SharePoint group.	High
Site collection ownership granted	Created when ownership of a site collection is granted to another SharePoint user.	High
Site collection ownership revoked	Created when ownership of a site collection is revoked for a SharePoint user.	High

SharePoint Security Group

Table 8. SharePoint Security Group events
Event	Description	Severity
Member added to security group	Created when a member is added to a security group for a SharePoint® site.	High
Member removed from security group	Created when a member is removed from a security group for a SharePoint site.	High
Security group created	Created when a security group is created for a SharePoint site to manage the users of the site.	Medium
Security group deleted	Created when a security group for a SharePoint site is deleted.	Medium

SharePoint Site

Table 9. SharePoint Site events
Event	Description	Severity
Site created	Created when a new site is created on the SharePoint® platform.	Medium
Site deleted	Created when a site is deleted from the SharePoint platform.	High
Site moved	Created when a site is moved to another location within the SharePoint platform.	Medium

SharePoint Site Collection

Table 10. SharePoint Site Collection events
Event	Description	Severity
Site collection created	Created when a new site collection is created for a SharePoint® platform.	Medium
Site collection deleted	Created when a site collection is deleted from a SharePoint platform. NOTE: Change Auditor does NOT capture a site collection deleted event when the delete operation is initiated via PowerShell® using the ‘immediate delete’ option.	High

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center