Active Directory - AD Audit - Table of Contents
Active Directory - AD Audit - Overview
AD Audit presents a dashboard with metrics for Event Stats, User Stats, and Enabled/Disabled Users. Additionally, it displays audit data for User, Computer, OU, and Groups.
Active Directory - AD Audit - Details
Event Stats
This graph contains the following data points:
A directory service object was created (Success)
A group service object was modified (Success)
A logon was attempted using explicit credentials (Success)
A security-enabled local group was deleted
A session was disconnected from a Windows Station (Success)
A session was reconnected from a Windows Station (Success)
An attempt was made to reset an account password
Login Failure
Login Success
The workstation was locked (Success)
The workstation was unlocked (Success)
User Account was created
User Account was enabled
User Stats
This graph contains the user account data points based on activity.
Enabled and Disabled Users
This graph shows the % of disabled vs enabled users.
AD User Audit
This section contains the following data fields:
Event Name
Event ID
Target User Name
Target Domain Name
Session Name
Client Name
Client Address
Computer Name
Channel
Provider Name
AD Computer Audit
This section contains the following data fields:
Event Name
Event ID
Target User Name
Target Domain Name
Session Name
Client Name
Client Address
Computer Name
Channel
Provider Name
AD OU Audit
This section contains the following data fields:
Event Name
Event ID
Target User Name
Target Domain Name
Session Name
Client Name
Client Address
Computer Name
Channel
Provider Name
AD Group Audit
This section contains the following data fields:
Event Name
Event ID
Target User Name
Target Domain Name
Session Name
Client Name
Client Address
Computer Name
Channel
Provider Name
Active Directory - AD Audit - Side Navigation Toolbar Overview
The standard Alerts are available from the side toolbar.
Active Directory - AD Audit - Side Navigation Toolbar Actions
Alerts
Tap to view the System Events, timeline-style for the selected company.
Need Support?
Contact our support team by sending an email to support@connectsecure.com or by visiting our Partner Portal, where you can create, view, and manage your tickets.
https://cybercns.freshdesk.com/en/support/login
