Features of ADAudit Plus

Schedule a demo

Use case
Data source
Compliance
Industry

By use case

Windows logon auditing

Continuously audit logon activity. Track everything from logon failures to logon history.
Account lockout analysis

Receive alerts about lockouts, and find the root cause of lockouts from an extensive list of Windows components.
Employee work hours monitoring

Continuously monitor active and idle time spent by employees at their workstations.
Windows server change notifier

Get information on who did what change, when, and from where in your Windows Server environment.
Privileged user monitoring

Audit use of privileges to hold admins and other privileged users accountable for their actions.
File change monitoring

Track file changes across Windows, NetApp, EMC, Synology, Hitachi, Huawei, Amazon FSx for Windows, QNAP, and Azure file servers.
Attack surface analyzer

Detect 25+ AD attacks and identify risky cloud configurations across Azure, Google Cloud Platform (GCP), and Amazon Web Services (AWS).
Insider threat detection

Leverage user behavior analytics to establish activity patterns and spot subtle anomalies that might be an indicator of compromise.
Ransomware detection

Get instantly notified via email or SMS when there is a sudden spike in file accesses, and automatically shut down infected devices.
Compliance reporting

Automate the generation and email delivery of over 250 prepackaged reports. Customize reports to suit your specific needs.
Remote desktop monitoring

Track remote desktop connections as well as remote logons occurring via RDG servers and RADIUS Network Policy Servers.
Object change auditing

Audit changes to users, computers, groups, OUs, GPOs, and other AD objects.
Permission change auditing

Track changes to objects' permissions across your Windows Server environment.
GPO change auditing

Monitor changes to Group Policy Objects (GPOs) and their settings, such as password policies, audit policies, etc.
Azure AD auditing

Audit sign-ins and changes in Azure AD, and gain a correlated view of activity across hybrid environments.
File integrity monitoring

Track access to the operating system (OS), software program, and other critical local files residing on Windows servers and workstations.
Removable storage auditing

Monitor file activity in removable storage devices such as USBs across your Windows Server environment.
Printer auditing

Keep tabs on the use of printers across your Windows Server environment.
AD FS auditing

Track all authentication attempts recorded by federation servers.
LAPS auditing

Monitor who is viewing or modifying local admin credentials in Microsoft's Local Administrator Password Solution.
Scheduled tasks and process auditing

Audit scheduled tasks that have been created, deleted, or modified, and processes that have been started or stopped.
User-based consolidated audit trail

Get a consolidated audit trail of activities carried out by any user in your Windows Server environment.
Long-term archive of log data

Archive audit log data for as long as you want, and restore it as needed.
SIEM integration

Maximize the potential of your SIEM tool by forwarding logs to Splunk, ArcSight, and Syslog servers.
PowerShell auditing

Track PowerShell processes that run in your Windows Server environment along with the commands executed in them.
Mac logon auditing

Monitor user logon and logoff activities happening across Apple Mac computers in your network.

By data source

Active Directory (AD)

Get full visibility into logon activity, AD and GPO changes, privileged user actions, and more.
Azure AD

Audit sign-ins and changes in Azure AD, and gain a correlated view of activity across hybrid environments.
Windows Server

Audit logons and changes to local accounts, security settings, and files in Windows Server. Audit federation servers (AD FS), printers, and more.
Windows workstation

Monitor logons and changes to local accounts, security settings, and files in Windows workstations.
Mac workstation

Monitor user logon and logoff activities happening across Apple Mac computers in your network.
Windows file server

Track successful and failed file accesses, ownership changes, permission changes, and more in Windows file servers and failover clusters.
NetApp filer

Track successful and failed NetApp file accesses, ownership changes, permission changes, and more.
EMC file server

Track successful and failed file accesses, ownership changes, permission changes, and more in EMC VNX, VNXe, Isilon, Celerra, and Unity.
Synology file server

Track file accesses and failed attempts to access a file in Synology file systems.
Hitachi file server

Audit file accesses and permission changes across Hitachi NAS devices.
Huawei OceanStor

Audit file accesses and permission changes across Huawei OceanStor storage systems.
Amazon FSx for Windows file server

Audit file accesses, modifications, and deletions across your Amazon FSx for Windows file servers.
QNAP file server

Audit file accesses, modifications, and deletions across your QNAP file servers.
Azure file share

Audit file accesses, creations, modifications, and deletions across your Azure file shares.
Nutanix Files

Track file creations, modifications, deletions, moves, renames, reads, and folder permission changes across Nutanix Files.
CTERA Edge Filers

Audit file reads, writes, creations, executions, deletions, and changes in permissions and ownership across CTERA Edge Filers.

By compliance

SOX

Closely monitor logon activity, AD changes, administrative user actions, and file changes to meet SOX requirements.
HIPAA

Track access to files containing protected health information, logon activity, and AD changes to meet HIPAA requirements.
GDPR

Keep tabs on logon activity and file changes to meet the GDPR requirements.
PCI DSS

Track access to files containing card holder data, logon activity, and AD changes to meet PCI DSS requirements.
GLBA

Audit logon activity, AD changes, and file changes to meet GLBA requirements.
FISMA

Closely monitor logon activity, AD changes, administrative user actions, and file changes to meet FISMA requirements.
ISO 27001

Audit logon activity, AD changes, and administrative user actions to meet ISO 27001 requirements.

By industry

Healthcare

Track user logon activity, AD changes, and access to files containing protected health information, and ensure compliance with regulations such as HIPAA.
Finance

Audit access to files containing sensitive information, receive alerts for suspicious user logons and AD changes, and ensure compliance with regulations such as PCI DSS.
Education

Track user logons, AD changes, and access to files containing student data, and ensure compliance with regulations such as FERPA.

Features

Features of ADAudit Plus

By use case

Windows logon auditing

Account lockout analysis

Employee work hours monitoring

Windows server change notifier

Privileged user monitoring

File change monitoring

Attack surface analyzer

Insider threat detection

Ransomware detection

Compliance reporting

Remote desktop monitoring

Object change auditing

Permission change auditing

GPO change auditing

Azure AD auditing

File integrity monitoring

Removable storage auditing

Printer auditing

AD FS auditing

LAPS auditing

Scheduled tasks and process auditing

User-based consolidated audit trail

Long-term archive of log data

SIEM integration

PowerShell auditing

Mac logon auditing

By data source

Active Directory (AD)

Azure AD

Windows Server

Windows workstation

Mac workstation

Windows file server

NetApp filer

EMC file server

Synology file server

Hitachi file server

Huawei OceanStor

Amazon FSx for Windows file server

QNAP file server

Azure file share

Nutanix Files

CTERA Edge Filers

By compliance

SOX

HIPAA

GDPR

PCI DSS

GLBA

FISMA

ISO 27001

By industry

Healthcare

Finance

Education

ADAudit Plus—A single pane of glass for complete Windows server auditing

ADAudit Plus Trusted By

Meet all auditing and IT security needs with ADAudit Plus.

A single pane of glass for complete Active Directory Auditing and Reporting