立即与支持人员聊天
与支持团队交流

Change Auditor 7.2 - Whats New

What's New in Change Auditor 7.2 What's New in Change Auditor 7.1.1 What's New in Change Auditor 7.1 What's New in Change Auditor 7.0.4 What's New in Change Auditor 7.0.3 What's New in Change Auditor 7.0.2 What's New in Change Auditor 7.0.1 What's New in Change Auditor 7.0

What's New in Change Auditor 7.1.1

What’s New in Change Auditor 7.1.1

As a result of ongoing research and development, and in response to customer feedback, the following enhancements have been made in this release of Quest Change Auditor.

•
Additional Office 365 Exchange Online mailbox events
•
Enhanced security auditing
•
Search enhancements
•
SIEM tool integration improvements
•
Ability to audit and protect the Active Directory Database
•
Ability to audit Active Directory Federation Services
•
Foreign forest support
•
Additional platform support
•
Miscellaneous features and enhancements

Additional Office 365 Exchange Online mailbox events

The following events have been added:

•
Message opened in online shared mailbox
•
Message opened in online mailbox by owner
•
Message opened in online mailbox by non-owner
•
Online mailbox auditing has been throttled
•
Folder opened in online mailbox by owner
•
Folder synchronized from online shared mailbox
•
Folder synchronized from online mailbox by owner
•
Folder synchronized from online mailbox by non-owner

Enhanced security auditing

•
Event generated when an agent's configuration for Kerberos ticket lifetime is changed:
•
Agent configuration Kerberos Ticket Lifetime changed
•
Event generated when Kerberos auditing components are not on the domain controller resulting in Kerberos authentication events not being captured:
•
Kerberos auditing components failed to load
•
Ability to detect when an irregular domain replication request is performed which could indicate a potential threat:
•
Irregular domain replication activity detected
•
Additional built-in searches:
•
All Irregular Domain Replication Activity Events under Shared | Built-in | All Events
•
All Kerberos user ticket events that exceed the maximum ticket lifetime in the past 30 days under Shared | Built-in | Logon Activity

Search enhancements

•
Ability to search and filter events based on the coordinator that processed them.
•
Updated Coordinator Statistics page:
•
Coordinator ID column to identify the coordinator that processes the events.
•
Hyperlinked columns to run a quick search for associated events for each coordinator.
•
Search results include the Coordinator ID to identify the coordinator that processed the event.
•
Layout tab includes a Coordinator ID column to sort and order results by coordinator.
•
Ability to see failure reason and status code in Active Directory failed search results.
•
Ability to see the full search folder path to identify the location for all search folder changes.
•
Updated default columns for the "All Failed Logons in the last 7 days” report.
•
Updated operators access when using the search commands:
Full access when using the following commands:
•
Invoke-CASearch
•
Get-CASearches
•
Get-CASearchDefinition
Restricted access to private searches and folders when using the following commands:
•
Set-CASearchProperties
•
Copy-CASearch
•
Add-CASearch
•
Move-CASearch
•
Remove-CASearch
•
Add-CASearchFolder
•
Remove-CASearchFolder
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级