What's new for Change Auditor

The following product notification applies to version 7.5 of Change Auditor. In this version of Change Auditor, the local SQL Compact Edition...

Suggested Alerts / Searches: ❖ Irregular Domain Controller Registration Events (DCShadow) ❖ Irregular Domain Replication Activity Events (DCSync...

Please refer to the Support Portal knowledge base article 4378741 for additional information and instructions on implementing.

Netapp can define separate SVMs, and we have one set up here to segregate traffic from user traffic, such as Change Auditor. So, in this situation...

NetApp Auditing not working after upgrading to Change Auditor v7.5.31003.0

Create a search and an alert using User Object and the User member-of added Event Class

Steps to create a search and an alert that targets a change of a user or a group

Steps to protect a user or a group in Active Directory

Timestamp issue in some SIEM endpoints after upgrading to Change Auditor v7.4

How to set up redundancy with Change Auditor ?

What ports are required to run ChangeAuditor Agent through firewall?

Agents are not connecting to the Coordinator and show as Inactive in the Agent Statistics.

Not receiving Azure events Error in the LOG: 2023-05-22 14:01:43.977 [58][WARN][MicrosoftCloud.Service.AzureADHelper.GetAzureAdSignOnEvents(0...

What are the ports in the Coordinator Configuration tool and how do they relate to the information in the SCP?

When attempting to create a new Active Directory Protection Template or edit an existing Active Directory Protection Template, an " Access Denied...

Can the Coordinator log be used to determine if the Coordinator no longer has a connection to the database?

We are getting an error while trying to connect an old DB using client--> Manage--> Add--> Database Direct. The client version and the...

How to set trace memory and processor issues, setting performance counters with perfmon (performance monitor)

Can I install Change Auditor on a host with the Windows Server 2025 (any edition) OS?

When starting the Change Auditor Coordinator (ChangeAuditor.Service) engine it uses all available memory, appears to lock the  server or is stuck...

What is the End of Support date for the different Change Auditor versions?

The design of Change Auditor does not allow traditional hotfixes or patches to be applied. This build is cumulative, meaning if version 7.5.0...

There are a number of circumstances which may lead to needing to manually installing the Change Auditor Agent on a remote server  including, but...

Steps to manually install an agent in a foreign forest

When trying to start the Change Auditor Coordinator, usually after a fresh install, it fails.  The Change Auditor Coordinator log displays the...

Change Auditor is returning the incorrect origin for events

How to configure the Change Auditor Coordinator  or Change Auditor Agent to use a specific Global Catalog server

Having issues with the time it takes the topology scan whenever forests are being harvested in Change Auditor, is there a way to improve this?

In the Coordinator log it is noted the warning WriteConnectionEvent failed with the following exception: System.ArgumentNullException: Array...

Some events that can be gathered from other file system based auditing are not captured from a NetApp server.  One of these events is for...