Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Security Guardian Current - User Guide

Table of Contents

Introducing Quest Security Guardian

About On Demand About Security Guardian Access Control Functional Overview Configuring Additional Components

Using the Dashboard Tier Zero Objects

How Tier Zero Objects are Identified Tier Zero Objects List Viewing Tier Zero Object Details Adding Tier Zero Objects Manually

Removing Manually-Added Tier Zero Objects

Certifying Tier Zero Objects Protecting Tier Zero Objects Exporting the Tier Zero Objects List

Privileged Objects

Privileged Objects List Viewing Privileged Object Details Adding Privileged Objects Manually

Removing a Manually-added Privileged Object

Certifying Privileged Objects Exporting the Privileged Objects List

First Assessment Notification Email Built-in Assessments All Assessments List Discoveries and Vulnerabilities

Discoveries List Pre-Defined Active Directory Discoveries

Additional Permissions Required for Specific Vulnerabilities Discovery for Credential Access Vulnerabilities Discovery for Defense Evasion Vulnerabilities Discovery for Discovery Vulnerabilities Discovery for Initial Access Vulnerabilities Discovery for Lateral Movement Vulnerabilities Discovery for Persistence Vulnerabilities Discovery for Privilege Escalation Vulnerabilities Discovery for Reconnaissance Vulnerabilities

Pre-Defined Entra ID Discoveries

Entra ID Vulnerabilities that Require a Premium License Discovery for Entra ID Credential Access Vulnerabilities Discovery for Entra ID Discovery Vulnerabilities Discovery for Entra ID Initial Access Vulnerabilities Discovery for Entra ID Persistence Vulnerabilities Discovery for Entra ID Privilege Escalation Vulnerabilities

Creating a Discovery Viewing, Editing, and Deleting a Discovery

Creating an Assessment Viewing, Editing, and Deleting an Assessment Assessment Results

Viewing Detail for an Assessed Vulnerability

Investigating Findings

Investigating Tier Zero and Privileged Object Findings Investigating Hygiene and Detected Indicators

Muting Findings for Hygiene and Detected Indicators Dismissing Findings Viewing Finding History

Security Settings

Configuring a Forwarding Destination Managing Indicators

Muting and Unmuting Indicators

Managing Data Collections

Appendix - Security Guardian Indicator Details

Indicators by Severity Indicators by Source

Indicators from On Demand Audit Indicators from Security Guardian Assessments Indicators from Security Guardian and Protection for Tier Zero Objects

Manually Running a Collection

You can manually run a data collection between scheduled collections if:

a collection is not currently running

AND

there are remaining collections for the workload.

NOTE: The number of collections remaining is determined by the last successful collection duration and the number of successful manually run collections completed in the last 24 hour period.

To manually run a collection:

Select the workload you want to run.
Click Run a Collection.

To stop a manually-running collection:

NOTES:

You cannot stop a scheduled collection that is running.
A stopped collection may result in a Last Result Failed status.

Select the workload for which you want to stop data collection.
Select Actions > Stop.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center