Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Netwrix Threat Prevention Software is an advanced cybersecurity solution that proactively blocks threats before they escalate into serious incidents. It continuously monitors IT environments to detect suspicious behavior, unauthorized access, and risky changes in real time. The platform enables immediate threat blocking, preventing attacks from progressing and causing damage. It helps mitigate insider threats by analyzing user behavior and identifying anomalies that signal potential risks. Netwrix Threat Prevention provides contextual alerts that explain what was blocked and why, enabling faster and more informed responses. The solution protects critical assets such as privileged groups, domain controllers, and system configurations. It reduces the risk of attacker persistence by eliminating escalation paths and stopping malicious activities early. The platform integrates with existing security tools like SIEM systems to enhance visibility and response capabilities. It strengthens overall security posture by combining prevention, detection, and alerting in one solution. Automation features reduce manual intervention and improve response times. Overall, it helps organizations proactively defend against evolving cyber threats.
Description
Quest Change Auditor is a real-time security auditing and threat monitoring solution for Active Directory and broader hybrid Microsoft environments. It monitors configuration changes, administrator actions, user activity, authentication events, and other security-relevant changes across on-premises and cloud systems. Supported environments include Active Directory, Azure AD, Office 365, Windows Server, Exchange, SQL Server, network-attached storage, SharePoint, and OneDrive for Business. Change Auditor detects indicators of compromise and suspicious activity while monitoring lateral movement and post-breach actions across systems such as file servers, Exchange, and Office 365. Threat prevention capabilities can block attackers from modifying critical groups, Group Policy settings and links, sensitive mailboxes, or extracting the Active Directory database to obtain credentials. The platform also identifies common Kerberos authentication vulnerabilities associated with Golden Ticket and Pass-the-Ticket attacks. Normalized audit records convert system activity into readable who, what, when, where, and workstation information together with before-and-after values. Threat timelines and related-event searches help investigators understand how individual changes connect with other security activity across the Microsoft environment. Change Auditor can integrate detailed activity logs with SIEM platforms such as Microsoft Sentinel, Splunk, ArcSight, and QRadar and can generate reports supporting compliance requirements including GDPR, PCI DSS, HIPAA, SOX, FISMA/NIST, and GLBA.
API Access
Has API
No
API Access
Has API
No
Integrations
Active Directory
Yes
IBM QRadar SIEM
Yes
Splunk Cloud Platform
Yes
Microsoft 365
No
Microsoft Entra ID
No
Microsoft Exchange
No
Microsoft OneDrive
No
Microsoft SharePoint
No
OpenText Enterprise Security Manager
Yes
Quest Identity Defense
No
Integrations
Active Directory
Yes
IBM QRadar SIEM
Yes
Splunk Cloud Platform
Yes
Microsoft 365
Yes
Microsoft Entra ID
Yes
Microsoft Exchange
Yes
Microsoft OneDrive
Yes
Microsoft SharePoint
Yes
OpenText Enterprise Security Manager
No
Quest Identity Defense
Yes
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Netwrix
Founded
2006
Country
United States
Website
netwrix.com/en/products/threat-prevention/
Vendor Details
Company Name
Quest Software
Founded
1987
Country
United States
Website
www.quest.com/change-auditor/