Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

On Demand Audit Current - User Guide

Table of Contents

Introducing On Demand Audit

Quest On Demand Overview Quest On Demand Audit Overview

Accessing Quest On Demand Audit Supported regions

Configuring On Demand Audit

Working with tenants Granting required consent Configuring tenant auditing Historical event collection Adding a user to an organization On Demand Audit Access Control roles

Change Auditor Integration

Customer data storage Registering a Change Auditor Installation Pausing Change Auditor event forwarding Resuming Change Auditor event forwarding Removing a Change Auditor Installation Reviewing the status of your Change Auditor installation

SpecterOps BloodHound Enterprise Integration

Configure a SpecterOps BloodHound Integration

Working with On Demand Audit

Using the dashboard

Working with Activity Indicators Monitoring Audit Health status Identifying critical activity Identifying the top active users Working with My Favorite Searches Monitoring sign-in trends

Searching for specific event data (Quick Search) Working with critical activity Working with searches

Working with private and shared searches Running a search Using built in searches

Active Directory Built in searches Active Directory Federation Services built in searches Active Directory Database built in searches Anomaly Activity built in searches Audit Health built in searches Microsoft Entra built in searches Best Practices built in searches BloodHound Tier Zero assets built in searches File System built in searches Group Policy built in searches Logon Activity built in searches Microsoft 365 built in searches On Demand Audit built in searches Teams built in searches Security Guardian built in searches

Creating a custom search Copying an existing search Exporting a search Creating a search from an existing search Creating or filtering a search based on event details Customizing the search display Viewing search results and event details Copying event details Modifying a search Deleting a search Working with categories

Working with alerts and notification templates

Using built in alerts and notification templates

Auditing Microsoft Entra

Event collection and Microsoft Entra subscription Working with Microsoft Entra Searches Working with Microsoft Entra events with multiple targets Auditing risk events

Auditing Microsoft 365

Appendix A: Working with Filters Documentation Roadmap Third-party contributions

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2025 Quest Software Inc. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center