立即与支持人员聊天
与支持团队交流

Change Auditor for Active Directory Queries 7.3 - User Guide

AD Query Event Details

This section provides a description of the ‘What’ details that are provided on the Events Details pane for an AD Query event.

 

Table 3. AD Query monitored event
Event
Description
Severity

AD Query Performed

Created when an AD query is performed on a container.

Low

 

Table 4. Event Details pane: AD Query events
What Fields
Description

What

Shows the container that was queried. For example, on LDAP bind operations, this displays the name (DN) being bound to; on LDAP search operations, this displays the baseObject of the search; and on LDAP compare operations, this displays the entry (DN) of the object being compared.

Subsystem

Displays ‘AD Query’

Action

Displays ‘Other’

Facility

Displays ‘AD Query’

Type

Displays the type of query:

•
LDAP
•
GC

Scope

Displays the scope of coverage:

•
This object only
•
This object and all children
•
Child objects only

Results

Displays the number of results returned as a result of the query.

Authentication

Indicates whether the LDAP operation is secured using the SSL (Secure Socket Layer)/ TLS (Transport Layer Security) technology, simple bind authentication, or signed using Kerberos-based encryption.

NOTE: If changes are initiated within LSASS and not through the LDAP protocol itself, this field will not be captured.

Port

Indicates the port used for authentication.

Occurrences

Displays the number of times the query occurred during the specified interval.

Since

Displays the date and time when the query was first initiated.

Elapsed

Displays how long the query took to run. Zero (0) indicates that it took less than a millisecond to complete.

Kerberos

Indicates whether the LDAP operation or AD query is signed using Kerberos-based encryption.

NOTE: If changes are initiated within LSASS and not through the LDAP protocol itself, this field will not be captured.

Filter

Displays the filter string used in the query.

Attributes

Displays the attributes that were queried.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级