立即与支持人员聊天
与支持团队交流

Change Auditor 7.2 - Whats New

What's New in Change Auditor 7.2 What's New in Change Auditor 7.1.1 What's New in Change Auditor 7.1 What's New in Change Auditor 7.0.4 What's New in Change Auditor 7.0.3 What's New in Change Auditor 7.0.2 What's New in Change Auditor 7.0.1 What's New in Change Auditor 7.0

Miscellaneous enhancements and updates

•
The following ’no from-value’ EMC events have been added to audit security events asynchronously. Before upgrading agents that are auditing EMC Isilon, add the ‘no from-value’ events to all existing EMC Isilon templates.
•
EMC File Access Rights Changed (no from-value)
•
EMC File Ownership Changed (no from-value)
•
EMC Folder Access Rights Changed (no from-value)
•
EMC Folder Ownership Changed (no from-value)
•
Prompt added to the SQL Auditing wizard that indicates that the -T1906 trace flag is required to audit SQL.
•
Exchange Mailbox protection is supported when access is attempted from EWS or OWA clients.
•
The agent install log will now be written to %ProgramFiles%\Quest\ChangeAuditor\Agent\Logs\ChangeAuditorAgentInstall.log.
•
All available coordinators in the installation are listed in the Change Auditor Agent Status dialog available from the agent system tray.
•
Help button added the auditing template wizards.
•
Searches will have the search name as the file name when they are exported. The file name will no longer be a GUID.
•
Multi-forest support for object selection.
In the Windows client, you can now select objects from more than one forest for:
•
Coordinator configuration (SMTP, shared folder, and group membership)
•
Purge and archive jobs
•
Active Directory, AD Query, ADAM (AD LDS), Exchange, and group policy searches
•
Email alert configuration
In the web client, you can now select objects from more than one forest for:
•
Coordinator configuration (SMTP and group membership)
•
Purge and archive jobs
•
Active Directory, AD Query, ADAM (AD LDS), Exchange, and group policy searches

What's New in Change Auditor 7.0

What’s New in Change Auditor 7.0

As a result of ongoing research and development, and in response to customer feedback, the following enhancements have been made in this release of Quest Change Auditor.

Updated license format

This new release of Change Auditor requires a new license key. Please obtain the new key before installing the new release. To obtain a new key, refer to the License Key Upgrade page: https://support.quest.com/my-account/licensing.

* 
NOTE: You will need your current license numbers. To get this information, select the license in the License Manager and choose Details.

Ability to forward event to third party tools

Change Auditor administrators can configure Change Auditor to send events to a third party tool using webhook technology. This technology allows you to integrate Change Auditor with SIEM tools or any other tool that accepts webhook notifications.

Currently, you can create and manage a subscription for managed and unmanaged Splunk Cloud and Splunk Enterprise editions through the Change Auditor client.

PowerShell commands are available to configure event forwarding to IBM QRadar (on premises deployments) and Micro Focus Security ArcSight Logger. These commands are in preview mode for this release.

* 
NOTE: The connection between Change Auditor and ArcSight/QRadar does not currently support TLS/SSL for secured connections. Only unsecured connections are supported for the preview release of event forwarding to ArcSight and QRadar.
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级