Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
During this period, threats can freely propagate through the network, leading to escalating damage and higher expenses. It is essential to react to attacks swiftly, aiming to mitigate harm within minutes through robust email search capabilities and quick removal from all inboxes. By recognizing anomalies that could signify threats, based on insights derived from past email analyses, organizations can enhance their security posture. Utilizing intelligence from earlier threat responses can help in blocking future emails from malicious entities and in pinpointing the most vulnerable users within the network. When email-based attacks successfully bypass security measures and infiltrate users’ inboxes, a prompt and precise response is crucial to avert further damage and curb the attack’s spread. Manual responses to these attacks are not only time-consuming but also ineffective, allowing threats to proliferate and amplifying the overall damage incurred. Therefore, implementing automated solutions can significantly enhance response times and improve overall security efficiency.
Description
Quest Change Auditor is a real-time security auditing and threat monitoring solution for Active Directory and broader hybrid Microsoft environments. It monitors configuration changes, administrator actions, user activity, authentication events, and other security-relevant changes across on-premises and cloud systems. Supported environments include Active Directory, Azure AD, Office 365, Windows Server, Exchange, SQL Server, network-attached storage, SharePoint, and OneDrive for Business. Change Auditor detects indicators of compromise and suspicious activity while monitoring lateral movement and post-breach actions across systems such as file servers, Exchange, and Office 365. Threat prevention capabilities can block attackers from modifying critical groups, Group Policy settings and links, sensitive mailboxes, or extracting the Active Directory database to obtain credentials. The platform also identifies common Kerberos authentication vulnerabilities associated with Golden Ticket and Pass-the-Ticket attacks. Normalized audit records convert system activity into readable who, what, when, where, and workstation information together with before-and-after values. Threat timelines and related-event searches help investigators understand how individual changes connect with other security activity across the Microsoft environment. Change Auditor can integrate detailed activity logs with SIEM platforms such as Microsoft Sentinel, Splunk, ArcSight, and QRadar and can generate reports supporting compliance requirements including GDPR, PCI DSS, HIPAA, SOX, FISMA/NIST, and GLBA.
API Access
Has API
No
API Access
Has API
No
Integrations
Active Directory
No
IBM QRadar SIEM
No
Microsoft 365
No
Microsoft Entra ID
No
Microsoft Exchange
No
Microsoft OneDrive
No
Microsoft SharePoint
No
Quest Identity Defense
No
SQL Server
No
Skype
No
Integrations
Active Directory
Yes
IBM QRadar SIEM
Yes
Microsoft 365
Yes
Microsoft Entra ID
Yes
Microsoft Exchange
Yes
Microsoft OneDrive
Yes
Microsoft SharePoint
Yes
Quest Identity Defense
Yes
SQL Server
Yes
Skype
Yes
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Barracuda
Founded
2003
Country
United States
Website
www.barracuda.com/products/forensics
Vendor Details
Company Name
Quest Software
Founded
1987
Country
United States
Website
www.quest.com/change-auditor/
Product Features
Incident Response
Attack Behavior Analytics
No
Automated Remediation
No
Compliance Reporting
No
Forensic Data Retention
No
Incident Alerting
No
Incident Database
No
Incident Logs
No
Incident Reporting
No
Privacy Breach Reporting
No
SIEM Data Ingestion / Correlation
No
SLA Tracking / Management
No
Security Orchestration
No
Threat Intelligence
No
Timeline Analysis
No
Workflow Automation
No
Workflow Management
No