Introducing ADAudit Plus' Attack Surface Analyzer—Detect 25+ AD attacks and identify risky Azure configurations. Learn more×
 
Support
 
Phone Get Quote
 
Support
 
US: +1 888 720 9500
US: +1 888 791 1189
Intl: +1 925 924 9500
Aus: +1 800 631 268
UK: 0800 028 6590
CN: +86 400 660 8680

Direct Inward Dialing: +1 408 916 9892

Features

Features of ADAudit Plus

Schedule a demo

By use case

  •    

    Windows logon auditing

    Continuously audit logon activity. Track everything from logon failures to logon history.

  •    

    Account lockout analysis

    Receive alerts about lockouts, and find the root cause of lockouts from an extensive list of Windows components.

  •    

    Employee work hours monitoring

    Continuously monitor active and idle time spent by employees at their workstations.

  •    

    Windows server change notifier

    Get information on who did what change, when, and from where in your Windows Server environment.

  •    

    Privileged user monitoring

    Audit use of privileges to hold admins and other privileged users accountable for their actions.

  •    

    File change monitoring

    Track file changes across Windows, NetApp, EMC, Synology, Hitachi, Huawei, Amazon FSx for Windows, QNAP, and Azure file servers.

  •  
       

    Attack surface analyzer

    Detect 25+ AD attacks and identify risky cloud configurations across Azure, Google Cloud Platform (GCP), and Amazon Web Services (AWS).

  •    

    Insider threat detection

    Leverage user behavior analytics to establish activity patterns and spot subtle anomalies that might be an indicator of compromise.

  •  

    Ransomware detection

    Get instantly notified via email or SMS when there is a sudden spike in file accesses, and automatically shut down infected devices.

View more

By data source

  •    

    Active Directory (AD)

    Get full visibility into logon activity, AD and GPO changes, privileged user actions, and more.

  •    

    Azure AD

    Audit sign-ins and changes in Azure AD, and gain a correlated view of activity across hybrid environments.

  •    

    Windows Server

    Audit logons and changes to local accounts, security settings, and files in Windows Server. Audit federation servers (AD FS), printers, and more.

  •    

    Windows workstation

    Monitor logons and changes to local accounts, security settings, and files in Windows workstations.

  •    

    Mac workstation

    Monitor user logon and logoff activities happening across Apple Mac computers in your network.

  •    

    Windows file server

    Track successful and failed file accesses, ownership changes, permission changes, and more in Windows file servers and failover clusters.

  •    

    NetApp filer

    Track successful and failed NetApp file accesses, ownership changes, permission changes, and more.

  •    

    EMC file server

    Track successful and failed file accesses, ownership changes, permission changes, and more in EMC VNX, VNXe, Isilon, Celerra, and Unity.

  •    

    Synology file server

    Track file accesses and failed attempts to access a file in Synology file systems.

  •    

    Hitachi file server

    Audit file accesses and permission changes across Hitachi NAS devices.

  •    

    Huawei OceanStor

    Audit file accesses and permission changes across Huawei OceanStor storage systems.

  •    

    Amazon FSx for Windows file server

    Audit file accesses, modifications, and deletions across your Amazon FSx for Windows file servers.

  •  

    QNAP file server

    Audit file accesses, modifications, and deletions across your QNAP file servers.

  •  

    Azure file share

    Audit file accesses, creations, modifications, and deletions across your Azure file shares.

By compliance

  •    

    SOX

    Closely monitor logon activity, AD changes, administrative user actions, and file changes to meet SOX requirements.

  •    

    HIPAA

    Track access to files containing protected health information, logon activity, and AD changes to meet HIPAA requirements.

  •    

    GDPR

    Keep tabs on logon activity and file changes to meet GDPR requirements.

  •    

    PCI DSS

    Track access to files containing card holder data, logon activity, and AD changes to meet PCI DSS requirements.

  •    

    GLBA

    Audit logon activity, AD changes, and file changes to meet GLBA requirements.

  •    

    FISMA

    Closely monitor logon activity, AD changes, administrative user actions, and file changes to meet FISMA requirements.

  •    

    ISO 27001

    Audit logon activity, AD changes, and administrative user actions to meet ISO 27001 requirements.

By industry

  •    

    Healthcare

    Track user logon activity, AD changes, and access to files containing protected health information, and ensure compliance with regulations such as HIPAA.

  •    

    Finance

    Audit access to files containing sensitive information, receive alerts for suspicious user logons and AD changes, and ensure compliance with regulations such as PCI DSS.

  •    

    Education

    Track user logons, AD changes, and access to files containing student data, and ensure compliance with regulations such as FERPA.

ADAudit Plus—A single pane of glass for complete Windows server auditing

ADAudit Plus Trusted By