立即与支持人员聊天

获得即时帮助
完成注册

登录

请求定价

联系销售人员

Change Auditor 7.1.1 - Whats New

What's New in Change Auditor 7.1.1

Additional Office 365 Exchange Online mailbox events Enhanced security auditing Search enhancements SIEM tool integration improvements Ability to audit and protect the Active Directory Database Ability to audit Active Directory Federation Services Foreign forest support Authentication enhancements Additional platform support Miscellaneous features and enhancements

What's New in Change Auditor 7.1

Azure Active Directory and Office 365 updates Active Directory updates Foreign forest support On Demand Audit integration updates Authentication and Logon activity updates Additional platform support Miscellaneous features and enhancements

What's New in Change Auditor 7.0.4

Foreign forest support Additional internal events Azure Active Directory and Office 365 updates Threat Detection enhancements SIEM subscription updates and enhancements Additional platform support Miscellaneous features and enhancements

What's New in Change Auditor 7.0.3

Change Auditor and On Demand Audit integration Azure Active Directory and Office 365 enhancements Threat Detection enhancements Additional internal events Additional platform support Miscellaneous features and enhancements

What's New in Change Auditor 7.0.2

Threat Detection updates and enhancements SIEM subscription updates and enhancements Additional PowerShell commands Ability to search based on authentication type and port Enhanced security between Change Auditor components (FIPS compliance) Azure Active Directory and Office 365 enhancements Additional platform support Miscellaneous features and enhancements

What's New in Change Auditor 7.0.1

GDPR built-in reports SIEM tool integration improvements Azure Active Directory auditing improvements Active Directory auditing improvements Improved tracking of changes to searches Additional platform support Email alert improvements Office 365 Exchange Online search improvements Miscellaneous enhancements and updates

What's New in Change Auditor 7.0

Updated license format Ability to forward event to third party tools Enhanced data security between the SQL Server and the coordinator Ability to manage Active Directory protection with PowerShell commands Ability to identify Read-Only Domain Controllers Search enhancements New built-in searches Additional platform support Miscellaneous enhancements and updates

What's New in Change Auditor 6.9.5

Additional platform support Ability to configure agents to function with proxy servers Enhanced ability to share and save search results Additional coordinator status information

What's New in Change Auditor 6.9.4

Additional platform support New Azure Active Directory events New built-in searches

What's New in Change Auditor 6.9.3

Additional platform support Generic Office 365 and Azure Active Directory events Azure Active Directory Auditing Wizard New Azure Active Directory events Additional Office 365 and Azure Active Directory event details Search improvements

What's New in Change Auditor 6.9.2

Additional platform support Office 365 auditing configuration and subsystem updates Office 365 SharePoint Online events Office 365 OneDrive for Business Additional internal events and built-in reports Updated Office 365 PowerShell commands New Azure Active Directory events New Office 365 and Azure Active Directory auditing guides

What's New in Change Auditor 6.9.1

Additional platform support Ability to search on selected mailboxes when creating and editing an Office 365 Exchange Online template Additional Office 365 Exchange Online internal events and built-in reports Additional Azure Active Directory events Additional Active Directory custom user monitoring events Azure Active Directory and Office 365 Exchange Online historical event collection Ability to detect Skype for Business agent status and configuration

What's New in Change Auditor 6.9

Additional platform support Office 365 Exchange Online auditing Azure Active Directory auditing Skype for Business auditing New PowerShell capabilities IT Security Search System requirement changes in Change Auditor 6.9 Miscellaneous

Additional platform support

The following support has been added:

•

Microsoft SQL Server 2016 SP1 for the coordinator database.

•

Microsoft SQL Server 2016 SP1 for SQL and SQL Data Level Auditing.

•

Microsoft Exchange Server 2010 RU16, 2013 CU15, 2016 CU4.

•

EMC Common Event Enabler (CEE) Framework up to 8.0 for auditing EMC Celerra/VNX and EMC Isilon.

•

Dell™ Fluid File System is now supported up to version 5.0 and version 6.0 and Dell Enterprise Manager version 16.2 for FluidFS auditing.

•

NetApp Filer with Data ONTAP 7.2 to 9.0 for NetApp auditing.

•

Change Auditor certificate compliant with Microsoft’s SHA-2 certificate update.

Office 365 auditing configuration and subsystem updates

Office 365 auditing configuration and subsystem updates

Along with Exchange Online, Change Auditor now audits user and administration activity for SharePoint Online and OneDrive for Business that correspond to the events in the Office 365 Security & Compliance Center unified audit log. You can track, report, and create alerts on activity such as when files and folders are accessed, created, deleted, uploaded, move, renamed, and checked in and out of sites. See Office 365 SharePoint Online events and Office 365 OneDrive for Business for the complete list of new audited events.

To configure auditing, you only need to create a single Office 365 template and select the Exchange Online, SharePoint Online, and OneDrive for Business services as required.

To facilitate the creation of Office 365 searches and reports and viewing events, the Office 365 Exchange Online subsystem has been renamed to Office 365 with the associated facilities — Office 365 Exchange Online Mailbox, Office 365 Exchange Online Administration, Office 365 SharePoint Online, and Office 365 OneDrive for Business.

Office 365 SharePoint Online events

Office 365 SharePoint Online events

The Event Details pane includes an Overview section that displays a high-level view of the activity that generated each event. For example, you can quickly see at a glance when the event occurred, who made the change, what changed, where the change originated (IP address), the activity as defined by the Office 365 Management API schema (operation), event ID, object site, path, or other identifier, record type, source relative Url, and user agent. Other fields may be displayed on an event-specific basis, for instance "From" and "To" for move and copy events.

You can see more information, by selecting the Details tab.

Table 4. Office 365 SharePoint Online file events
Event	Description
File accessed in SharePoint Online	Created when a user or system account accesses a file in a SharePoint Online site.
File checked in in SharePoint Online	Created when a user checks a file back in to a document library after they have completed their edits.
File checked out and discarded in SharePoint Online	Created when a file check out is undone resulting in no edits to the file in the document library.
File checked out in SharePoint Online	Created when a user checks out a file from a document library to ensure it is not accessed by others while being edited.
File copied in SharePoint Online	Created when a file is copied from a SharePoint Online site.
File deleted in SharePoint Online	Created when a file is deleted from a SharePoint Online site.
File downloaded in SharePoint Online	Created when a file is downloaded from a SharePoint Online site.
File modified in SharePoint Online	Created when file contents or properties are changed by a user or system account in a SharePoint Online site.
File moved in SharePoint Online	Created when a file is moved in a SharePoint Online site.
File previewed in SharePoint Online	Created when a file is viewed by a user or system account in a SharePoint Online site.
File renamed in SharePoint Online	Created when a file is renamed in a SharePoint Online site.
File restored in SharePoint Online	Created when a deleted file is restored in a SharePoint Online site.
File uploaded in SharePoint Online	Created when a file is uploaded to a SharePoint Online site.

Table 5. Office 365 SharePoint Online folder events
Event	Description
Folder accessed in SharePoint Online	Created when a user or system account accesses a folder in a SharePoint Online site.
Folder created in SharePoint Online	Created when a folder is created in a SharePoint Online site.
Folder deleted in SharePoint Online	Created when a folder is deleted from a SharePoint Online site.
Folder modified in SharePoint Online	Created when a folder property is changed in a SharePoint Online site.
Folder moved in SharePoint Online	Created when a folder is moved in a SharePoint Online site.
Folder renamed in SharePoint Online	Created when a folder is renamed in a SharePoint Online site.

Table 6. Office 365 SharePoint Online uncategorized event
Event	Description
Uncategorized Office 365 SharePoint Online audit event	Created when SharePoint Online activity is detected that is not included in existing Change Auditor events.

Office 365 OneDrive for Business

Office 365 OneDrive for Business

The Event Details pane includes an Overview section that displays a high-level view of the activity that generated each event. For example, you can quickly see at a glance when the event occurred, who made the change, what changed, where the change originated (IP address), the activity as defined by the Office 365 Management API schema (operation), event ID, object site, path, or other identifier, record type, source relative Url, and user agent. Other fields may be displayed on an event-specific basis, for instance "From" and "To" for move and copy events.

You can see more information, by selecting the Details tab.

Table 7. Office 365 OneDrive for Business file events
Event	Description
File accessed in OneDrive for Business	Created when a user or system account accesses a file in a OneDrive for Business site.
File checked in in OneDrive for Business	Created when a user checks in a file to a document library.
File checked out and discarded in OneDrive for Business	Created when a file check out is undone resulting in no edits to the file in the document library.
File checked out in OneDrive for Business	Created when a user checks out a file from a document library.
File copied in OneDrive for Business	Created when a file is copied from a OneDrive for Business site.
File deleted in OneDrive for Business	Created when a file is deleted from a OneDrive for Business site.
File downloaded in OneDrive for Business	Created when a file is downloaded from a OneDrive for Business site.
File modified in OneDrive for Business	Created when file contents or properties are changed by a user or system account in a OneDrive for Business site.
File moved in OneDrive for Business	Created when a file is moved in a OneDrive for Business site.
File previewed in OneDrive for Business	Created when a file is viewed by a user or system account in a OneDrive for Business site.
File renamed in OneDrive for Business	Created when a file is renamed in a OneDrive for Business site.
File restored in OneDrive for Business	Created when a deleted file is restored in a OneDrive for Business site.
File uploaded in OneDrive for Business	Created when a file is uploaded to a OneDrive for Business site.

Table 8. Office 365 OneDrive for Business folder events
Event	Description
Folder accessed in OneDrive for Business	Created when a user or system account accesses a folder in a OneDrive for Business site.
Folder created in OneDrive for Business	Created when a folder is created in a OneDrive for Business site.
Folder deleted in OneDrive for Business	Created when a folder is deleted from a OneDrive for Business site.
Folder modified in OneDrive for Business	Created when a folder property is changed in a OneDrive for Business site.
Folder moved in OneDrive for Business	Created when a folder is moved in a OneDrive for Business site.
Folder renamed in OneDrive for Business	Created when a folder is renamed in a OneDrive for Business site.

Table 9. Office 365 OneDrive for Business Uncategorized event
Event	Description
Uncategorized Office 365 OneDrive for Business audit event	Created when OneDrive for Business activity is detected that is not included in existing Change Auditor events.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级

© 2024 Quest Software Inc. ALL RIGHTS RESERVED. 使用条款隐私 Cookie Preference Center