Windows Auditing
Complete Visibility of Windows Systems
Windows auditing is a mechanism for tracking events. Knowing when and where these events occurred and who triggered them can help when doing Windows network forensics. It can also be very helpful with detecting certain types of problems like improper rights assignments in the file system. Our platform includes Windows auditing capabilities, to help organizations remain compliant with data protection requirements, identify potential threats early, and help to reduce the risk of a data breach.
Windows File System Audit
A specific set of Dashboard, Correlation Rules and Reports to monitor Windows file Server operation and show a who/where/when picture of what is going-on on your file servers.Several predefined events are constantly monitored to collect files and folders operations like creation, deletion, change and read. Predefined Correlation Rules set will warn about main suspicious activities on files and folder. Predefined Reports can be scheduled to be always ready for any need and keep an historical trace of files and folders operation.
Benefits
- Audit trails for Windows servers and clients
- 360° Windows system detail view
- Contextual and richment based on MitreATT&CK
- Active directory risk assessment
- Custom graphs and reports
- Dedicated correlation rules and dashboards out of the box
Get A Free Evaluation Today
Contact us now to learn more.