Chat now with support
Chat with Support

Security Guardian Current - User Guide

Introducing Quest Security Guardian Using the Dashboard Tier Zero Objects Privileged Objects Assessments Findings Security Settings Appendix - Security Guardian Indicator Details

First Assessment Notification Email

If email is configured for Security Guardian, after the first Assessment is completed for the organization, a notification email is sent which includes the total number of the following:

  • Findings without vulnerable objects

  • Findings with vulnerable objects

  • Findings with inconclusive results

  • Findings that returned an error

NOTE: This notification applies only for the first Assessment that is completed for an organization. If email is configured after the first Assessment has run, a notification will not be sent. Subsequent emails will be sent advising that the Assessment has been completed and vulnerable objects have grown in scope.

 

Built-in Assessments

Security Guardian includes built-in Security Assessments for Active Directory and/or Entra ID. They contain all pre-defined Discoveries provided by Quest and are run on all domains and/or tenants configured in On Demand for your organization.

NOTE: If no domains or tenants are configured for data collection, the status message Configuration Required will display in the All Assessments list.

Pre-defined Discoveries are added automatically to Assessments as they are released by Quest.

NOTE: Built-in Assessments cannot be edited or deleted.

All Assessments List

 

The All Assessments tab displays a list of all Assessments (both built-in and user-created) for the organization along with the following information for each:

  • the Assessment name (with a link to Assessment Details)

  • the Active Directory domain or Entra ID tenant containing the assessed objects (with the option to Link to Results)

  • the Workload (Active Directory or Entra ID)

  • Created By either:

  • the Status of the Assessment:

    Configuration Required

    NOTE: This status is used to indicate the absence of an Active Directory domain or Entra ID tenant in On Demand for the organization. This may be because:

    • A domain or tenant has not yet been added to On Demand, which will prevent the built-in Assessment from running.

    • The domain or tenant selected for the Assessment has since been removed from On Demand.

    • When the Assessment was created, all available domains or tenants were excluded.

    Agent Required (See Configuring Additional Components -Hybrid Agent)
    No Data Collected
    No Vulnerabilities Found
    n Vulnerabilities Found

  • the date and time when data was Last Collected

    NOTE: This field displays the signed-in user's local date and time.

Discoveries and Vulnerabilities

Discoveries are evaluated by Assessments to identify vulnerabilities in your organization's Active Directory and/or Entra ID. Security Guardian comes with several pre-defined Discoveries for Active Directory and Entra ID, and you can also create your own Discoveries.

 

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating