Visit our YouTube Channel for more video content: https://www.youtube.com/@connectsecure
Table of Contents
AD Audit - Details
Access the AD Audit from the Active Directory category.
The AD Audit dashboard will not populate until the Active AD Audit is executed. To do so, click on the Action menu from any installed agent (probe or LWA) and tap the Activate AD Audit:
Tap on the Activate AD Audit option to start the syncing, which occurs every 15 minutes.
The syncing process can be stopped by using the Deactivate AD Audit option.
Tap the AD Audit option under Active Directory to access the dashboard and data panels.
AD Audit presents a dashboard with metrics for Event Stats, User Stats, and Enabled/Disabled Users.
Active Directory - AD Audit - Details
Event Stats
This graph contains the following data points:
A directory service object was created (Success)
A group service object was modified (Success)
A logon was attempted using explicit credentials (Success)
A security-enabled local group was deleted
A session was disconnected from a Windows Station (Success)
A session was reconnected from a Windows Station (Success)
An attempt was made to reset an account password
Login Failure
Login Success
The workstation was locked (Success)
The workstation was unlocked (Success)
User Account was created
User Account was enabled
User Stats
This graph contains the user account data points based on activity.
Enabled and Disabled Users
This graph shows the % of disabled vs enabled users.
AD User Audit
This section contains the following data fields:
Event Name
Event ID
Target User Name
Target Domain Name
Session Name
Client Name
Client Address
Computer Name
Channel
Provider Name
AD Computer Audit
This section contains the following data fields:
Event Name
Event ID
Target User Name
Target Domain Name
Session Name
Client Name
Client Address
Computer Name
Channel
Provider Name
AD OU Audit
This section contains the following data fields:
Event Name
Event ID
Target User Name
Target Domain Name
Session Name
Client Name
Client Address
Computer Name
Channel
Provider Name
AD Group Audit
This section contains the following data fields:
Event Name
Event ID
Target User Name
Target Domain Name
Session Name
Client Name
Client Address
Computer Name
Channel
Provider Name
AD Audit - Toolbar Options
Date Filter
Tap to set a date filter on the data tables below.
Alerts
View our timeline style of System Events captured for each company. You can set an optional date filter range to target a specific date range of events.
Info
Tap here to view your V4 Getting Started Info.
https://cybercns.atlassian.net/wiki/x/MIDKfw
Help Link
Click to access the related documentation page; this link is functional on all screens and will take you to the appropriate documentation page.
Layout Settings
Here, you can change the UI look and feel using various options, including the Theme for color, the Scheme for dark and light mode, the Layout for toolbar and module positions, and the toggle to set the table view default.
Get Support
Our support team is here to help. Use one of three options to start a support request.
Email to support@connectsecure.com
Login to our Freshdesk partner portal at https://cybercns.freshdesk.com
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article