Support
 
Phone Get Quote
 
Support
 
US: +1 888 720 9500
US: +1 888 791 1189
Intl: +1 925 924 9500
Aus: +1 800 631 268
UK: 0800 028 6590
CN: +86 400 660 8680

Direct Inward Dialing: +1 408 916 9892

 

Windows Server change audit reports

File Integrity Monitoring

  • All File or Folder Changes
  • File (or) Folder Created
  • File (or) Folder Modified
  • File (or) Folder Deleted
  • File (or) Folder Moved
  • File (or) Folder Renamed
  • Folder Permission Changes
  • Folder Audit Setting Changes (SACL)
  • Folder Owner Changes
  • File (or) Folder Copy-N-Pasted
  • Failed attempt to Write File
  • Failed attempt to Delete File

AD LDS Auditing

  • User Mgmt(AD LDS)
  • Group Mgmt(AD LDS)
  • Computer Mgmt(AD LDS)
  • OU Mgmt(AD LDS)
  • GPO Mgmt(AD LDS)
  • Other AD Objects Mgmt(AD LDS)
  • Configuration Mgmt(AD LDS)

ADFS Auditing

  • Logon Success
  • Extranet Lockout
  • Logon Failure

USB Storage Auditing

  • All File or Folder Changes
  • File Read
  • File Modified
  • File Copy and Paste
  • Removable Device Plug In

ADCS Auditing

  • All ADCS activities
  • Certificate Request Status
  • Recently Modified Requests
  • Recently Modified CA Properties
  • Recently Retrieved Keys
  • Certificate Template Changes

Printer Auditing

  • Recent Jobs
  • User Based Reports
  • Printer Usage
  • Printer Based Reports

PowerShell Auditing

  • Process Tracking
  • Script Block Logging
  • Module Logging

AD Replication Audit

  • Replica Sync History
  • Replica Source NC Changes
  • Replica Destination NC Changes
  • AD Object Attributes Replication
  • Lingering Objects Removed From Replica
  • Replication Failures
  • Replication Failure Details

LDAP Auditing

  • Unsecure LDAP Binds
  • No of Daily Unsecure LDAP Bind
  • No of LDAP Queries
  • Recent LDAP Queries
  • Error from LDAP Server
  • No of rejected unsecure LDAP Binds
  • Attempt to make LDAPS connection
  • Time-out LDAP Connection

Network share Auditing

  • Network share changes
  • Network share read
  • Network share added
  • Network share modified
  • Network share delete

Server Audit Reports

  • Summary Report
  • System Events
  • System Time Changed
  • Wifi Connection
  • Wifi DisConnection

Local Logon-Logoff

  • Logon Failures
  • Logon Activity
  • Logon Duration
  • User Work Hours
  • Remote Desktop Services Activity
  • Remote Desktop Gateway
  • RADIUS Logon Failures(NPS)
  • RADIUS Logon History(NPS)
  • Credential Validation
  • Recently Detected Replay Attack
  • Special Groups have been assigned to a New Logon.
  • Wifi Logon Activity

Process Tracking

  • Service Install Attempted
  • Service Started
  • Service Stopped
  • Service Failed
  • Startup Type Modified
  • Scheduled Task Created
  • Scheduled Task Deleted
  • Scheduled Task Modified
  • Scheduled Task Disabled
  • Scheduled Task Enabled
  • New Process Created
  • New Process Exited
  • Who started the Process

Local Account Management

  • Recently Created Users
  • Recently Deleted Users
  • Recently Modified Users
  • Recently Enabled Users
  • Recently Disabled Users
  • Recently Locked Out Users
  • Recently Unlocked Users
  • Recently Password Changed Users
  • Recently Password Set Users
  • Recently Created Groups
  • Recently Deleted Groups
  • Recently Added Members to Groups
  • Recently Removed Members from Groups

Policy Changes

  • User Rights Assigned
  • User Rights Removed
  • Policy Changed

LAPS Audit

  • LAPS Password Read
  • LAPS Password Expiry Changes

Computer Start and Shutdown

  • Computer Startup and Shutdown
  • Computer Last Startup and Shutdown
  • Computers not Shutdown

Netlogon vulnerable Schannel Connection Audit

  • Denied connection from a machine account
  • Denied connection using a trust account
  • Allowed connection
  • Allowed connection from a machine account
  • Allowed connection using a trust account

DNS Changes

  • DNS Nodes Added
  • DNS Nodes Removed
  • DNS Nodes Modified
  • DNS Zones Added
  • DNS Zones Removed
  • DNS Zones Modified
  • DNS Permission Changes

ADAudit Plus Trusted By