Active Directory Administrator Logons
|
Feature:
|
Compliance -> Logon Tracking -> Console Logons
|
Report:
|
Administrative Console Logons
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-13
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.1.3
|
10.10.1
|
10.10.2
|
10.10.3
|
10.10.4
|
11.5.1
|
11.5.2
|
11.5.3
|
13.2.3
|
15.1.3
|
15.2.1
|
15.3.1
|
|
|
Cobit
|
PO 4.11
|
PO 7.8
|
AI 2.3
|
AI 2.4
|
AI 4.2
|
DS 5.3
|
DS 5.4
|
DS 5.5
|
ME 2.3
|
ME 2.5
|
ME 3.4
|
ME 4.5
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
164.312d
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Active Directory General Object Changes
|
Feature:
|
Event -> Event Search
|
Report:
|
Active Directory General Object Changes
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
6.4
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-13
|
AU-3
|
AU-6
|
AU-7
|
|
|
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.1.2
|
10.1.3
|
10.10.1
|
10.10.2
|
10.10.3
|
10.10.4
|
11.1.1
|
12.5.1
|
13.2.1
|
13.2.3
|
15.1.3
|
15.2.1
|
15.3.1
|
|
Cobit
|
PO 4.11
|
AI 2.3
|
AI 2.4
|
AI 4.2
|
AI 6.4
|
AI 6.5
|
DS 5.5
|
ME 2.3
|
ME 2.5
|
ME 3.4
|
ME 4.5
|
ME 4.7
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Active Directory Group Member Additions
|
Feature:
|
Compliance -> Account Changes -> Group Account
|
Report:
|
Active Directory Security Group Changes
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
6.4
|
7.1
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-2
|
AC-13
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.1.2
|
10.1.3
|
10.10.1
|
10.10.3
|
10.10.4
|
12.5.1
|
13.2.1
|
13.2.3
|
15.1.3
|
15.2.1
|
15.3.1
|
|
|
|
Cobit
|
PO 4.11
|
PO 7.8
|
AI 2.3
|
AI 2.4
|
AI 4.2
|
AI 6.4
|
AI 6.5
|
DS 5.4
|
DS 5.5
|
ME 2.3
|
ME 3.4
|
ME 4.4
|
ME 4.5
|
ME 4.7
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Active Directory Group Member Deletions
|
Feature:
|
Compliance -> Account Changes -> Group Account
|
Report:
|
Active Directory Security Group Changes
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
6.4
|
7.1
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-2
|
AC-13
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
8.3.3
|
10.1.2
|
10.10.1
|
10.10.2
|
10.10.3
|
10.10.4
|
11.1.1
|
12.5.1
|
13.2.1
|
13.2.3
|
15.1.3
|
15.2.1
|
15.3.1
|
|
Cobit
|
PO 4.11
|
PO 7.8
|
AI 2.3
|
AI 2.4
|
AI 4.2
|
AI 6.4
|
AI 6.5
|
DS 5.4
|
DS 5.5
|
ME 2.3
|
ME 2.5
|
ME 3.4
|
ME 4.4
|
ME 4.5
|
ME 4.7
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Active Directory New or Enabled Account
|
Feature:
|
Compliance -> Account Changes -> User Account
|
Report:
|
Active Directory User Changes
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
7.1
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-2
|
AC-13
|
PS-6
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.1.2
|
10.10.1
|
10.10.3
|
10.10.4
|
12.5.1
|
15.1.3
|
15.2.1
|
15.3.1
|
|
|
|
|
|
|
Cobit
|
PO 4.11
|
PO 7.8
|
AI 2.3
|
AI 2.4
|
AI 3.2
|
AI 4.2
|
DS 5.3
|
DS 5.4
|
DS 5.5
|
ME 2.5
|
|
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
164.312d
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Active Directory Users Deleted or Disabled
|
Feature:
|
Compliance -> Account Changes -> User Account
|
Report:
|
Active Directory User Changes
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
6.4
|
7.1
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-2
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
8.3.3
|
10.1.2
|
10.10.1
|
10.10.2
|
10.10.3
|
10.10.4
|
11.1.1
|
12.5.1
|
13.2.1
|
13.2.3
|
15.1.3
|
15.2.1
|
15.3.1
|
|
Cobit
|
PO 4.11
|
PO 4.14
|
PO 7.8
|
AI 2.4
|
AI 6.4
|
DS 5.4
|
DS 5.5
|
ME 2.5
|
ME 3.4
|
ME 4.7
|
|
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
164.312d
|
164.312e
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Active Directory Group Policy Change Report
|
Feature:
|
Event -> Event Search
|
Report:
|
Active Directory Group Policy Changes
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
6.4
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-3
|
AC-13
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.1.2
|
10.1.3
|
10.10.1
|
10.10.2
|
10.10.3
|
10.10.4
|
11.1.1
|
12.5.1
|
13.2.1
|
13.2.3
|
15.1.3
|
15.2.1
|
15.3.1
|
|
Cobit
|
PO 4.11
|
AI 2.3
|
AI 2.4
|
AI 4.2
|
AI 6.4
|
AI 6.5
|
DS 5.5
|
ME 2.3
|
ME 2.5
|
ME 3.4
|
ME 4.5
|
ME 4.7
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Active Directory Permission Changes
|
Feature:
|
Event -> Event Search
|
Report:
|
Active Directory General Object Changes
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
6.4
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-3
|
AC-13
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.1.2
|
10.1.3
|
10.10.1
|
10.10.2
|
10.10.3
|
10.10.4
|
12.5.1
|
13.2.1
|
13.2.3
|
15.1.3
|
15.2.1
|
15.3.1
|
|
|
Cobit
|
PO 4.11
|
AI 2.3
|
AI 4.2
|
AI 6.4
|
AI 6.5
|
DS 5.5
|
ME 2.5
|
ME 3.4
|
ME 4.5
|
ME 4.7
|
|
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
164.312d
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Active Directory User Account Lockouts and Password Resets
|
Feature:
|
Compliance -> Account Changes -> User Account
|
Report:
|
Active Directory User Changes
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-2
|
AC-7
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.1.3
|
10.10.1
|
10.10.2
|
10.10.3
|
10.10.4
|
11.5.1
|
11.5.2
|
11.5.3
|
13.2.3
|
15.1.3
|
15.2.1
|
15.3.1
|
|
|
Cobit
|
PO 4.11
|
AI 3.2
|
AI 4.2
|
DS 5.4
|
DS 5.5
|
ME 2.5
|
|
|
|
|
|
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
164.312e
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Active Directory Domain Policy Changes
|
Feature:
|
Compliance -> Policy Changes -> Domain Policy
|
Report:
|
Active Directory Domain Policy Changes
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-3
|
AC-13
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.1.2
|
10.10.1
|
10.10.2
|
10.10.4
|
12.5.1
|
13.2.1
|
15.1.3
|
15.2.1
|
15.3.1
|
|
|
|
|
|
Cobit
|
PO 4.11
|
AI 2.3
|
AI 2.4
|
AI 4.2
|
AI 6.4
|
AI 6.5
|
DS 5.5
|
ME 2.3
|
ME 2.5
|
ME 3.4
|
ME 4.5
|
ME 4.7
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
164.312c
|
164.312d
|
164.312e
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Local Group Member Additions Report
|
Feature:
|
Compliance -> Account Changes -> Group Account
|
Report:
|
Member Server Security Group Changes
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
6.4
|
7.1
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-2
|
AC-13
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.1.2
|
10.1.3
|
10.10.1
|
10.10.3
|
10.10.4
|
12.5.1
|
13.2.1
|
13.2.3
|
15.1.3
|
15.2.1
|
15.3.1
|
|
|
|
Cobit
|
PO 4.11
|
PO 7.8
|
AI 2.3
|
AI 2.4
|
AI 4.2
|
DS 5.4
|
DS 5.5
|
ME 2.3
|
ME 2.5
|
ME 3.4
|
ME 4.4
|
ME 4.5
|
ME 4.7
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Local Group Member Deletions Report
|
Feature:
|
Compliance -> Account Changes -> Group Account
|
Report:
|
Member Server User Changes
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
6.4
|
7.1
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-2
|
AC-13
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
8.3.3
|
10.1.2
|
10.10.1
|
10.10.2
|
10.10.3
|
10.10.4
|
11.1.1
|
12.5.1
|
13.2.1
|
13.2.3
|
15.1.3
|
15.2.1
|
15.3.1
|
|
Cobit
|
PO 4.11
|
PO 7.8
|
AI 2.3
|
AI 2.4
|
AI 4.2
|
AI 6.4
|
AI 6.5
|
DS 5.4
|
DS 5.5
|
ME 2.3
|
ME 2.5
|
ME 3.4
|
ME 4.4
|
ME 4.5
|
ME 4.7
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Local Users Consolidated Changes
|
Feature:
|
Compliance -> Account Changes -> User Account
|
Report:
|
Member Server User Changes
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
6.4
|
7.1
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-2
|
AC-13
|
PS-6
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.1.2
|
10.1.3
|
10.10.1
|
10.10.3
|
10.10.4
|
12.5.1
|
13.2.1
|
13.2.3
|
15.1.3
|
15.2.1
|
15.3.1
|
|
|
|
Cobit
|
PO 4.11
|
PO 7.8
|
AI 2.3
|
AI 2.4
|
AI 3.2
|
AI 4.2
|
DS 5.3
|
DS 5.4
|
DS 5.5
|
ME 2.5
|
|
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
164.312d
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Object Access
|
Feature:
|
Compliance -> File Access
|
Report:
|
n/a
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
6.4
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AU-3
|
AU-6
|
AU-7
|
|
|
|
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.6.1
|
10.10.1
|
10.10.2
|
10.10.3
|
10.10.4
|
13.2.1
|
13.2.3
|
15.1.3
|
15.2.1
|
15.3.1
|
|
|
|
|
Cobit
|
PO 4.11
|
PO 8.6
|
AI 1.3
|
AI 2.3
|
AI 2.4
|
DS 5.5
|
ME 2.3
|
ME 2.5
|
ME 3.4
|
ME 4.4
|
|
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Object Deletions
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Feature:
|
Compliance -> File Access
|
Report:
|
n/a
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
6.4
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.6.1
|
10.10.1
|
10.10.3
|
13.2.3
|
15.1.3
|
15.2.1
|
15.3.1
|
|
|
|
|
|
|
|
Cobit
|
AI 2.3
|
DS 5.5
|
DS 9.2
|
ME 2.3
|
ME 2.5
|
ME 3.4
|
ME 4.4
|
|
|
|
|
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Permission Changes
|
Feature:
|
Compliance -> File Access
|
Report:
|
n/a
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
6.4
|
7.1
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-13
|
AU-2
|
|
|
|
|
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.6.1
|
10.10.1
|
10.10.2
|
10.10.3
|
10.10.4
|
11.1.1
|
11.6.1
|
|
|
|
|
|
|
|
Cobit
|
AI 2.3
|
AI 2.4
|
DS 5.5
|
ME 2.3
|
ME 2.5
|
ME 3.4
|
ME 4.4
|
|
|
|
|
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Programs Executed By User
|
Feature:
|
Compliance -> Process Tracking
|
Report:
|
n/a
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
10.1
|
10.6
|
|
|
|
|
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
MA-3
|
AC-13
|
AU-2
|
|
|
|
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.10.1
|
10.10.2
|
10.10.3
|
10.10.4
|
11.5.4
|
15.1.2
|
|
|
|
|
|
|
|
|
Cobit
|
PO 4.11
|
AI 1.3
|
AI 2.3
|
AI 2.4
|
DS 5.5
|
ME 2.5
|
ME 3.4
|
ME 4.4
|
|
|
|
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Programs Executed Summary
|
Feature:
|
Compliance -> Process Tracking
|
Report:
|
n/a
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
10.6
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AU-2
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.10.1
|
10.10.2
|
10.10.3
|
11.5.4
|
15.1.2
|
|
|
|
|
|
|
|
|
|
Cobit
|
PO 5.5
|
AI 1.3
|
AI 2.4
|
DS 5.5
|
ME 2.5
|
ME 3.4
|
ME 4.4
|
|
|
|
|
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
User Activity Journal
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Feature:
|
Compliance -> Process Tracking
|
Report:
|
n/a
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-13
|
AU-2
|
AU-6
|
AU-7
|
|
|
|
|
|
|
|
|
|
|
|
ISO17799
|
10.10.1
|
10.10.2
|
10.10.3
|
10.10.4
|
15.1.5
|
|
|
|
|
|
|
|
|
|
|
Cobit
|
PO 4.11
|
DS 5.5
|
ME 2.3
|
ME 3.4
|
ME 4.5
|
|
|
|
|
|
|
|
|
|
|
HIPAA
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Major Security Events and Policy changes
|
Feature:
|
Compliance -> Policy Changes
|
Report:
|
Active Directory Domain Policy Changes
|
|
Active Directory Audit Policy Changes
|
|
Active Directory Kerberos Policy Changes
|
|
Active Directory Trust Relationship Changes
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
6.4
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.1.2
|
10.10.1
|
10.10.2
|
10.10.4
|
12.5.1
|
13.2.1
|
15.1.3
|
15.2.1
|
15.3.1
|
|
|
|
|
|
Cobit
|
PO 4.11
|
AI 2.3
|
AI 2.4
|
AI 6.5
|
DS 5.4
|
DS 5.5
|
ME 2.3
|
ME 2.5
|
ME 4.5
|
|
|
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Domain Account Authentication
|
Feature:
|
Compliance -> Logons -> Network
|
Report:
|
Domain Account Authentication
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
10.3
|
10.5
|
10.7
|
|
|
|
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-13
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.1.3
|
10.10.1
|
10.10.2
|
10.10.3
|
10.10.4
|
11.5.2
|
11.5.3
|
13.2.3
|
15.1.3
|
15.2.1
|
15.3.1
|
|
|
|
Cobit
|
PO 4.11
|
DS 5.5
|
ME 2.1
|
ME 2.5
|
|
|
|
|
|
|
|
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
164.312d
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Domain Account Authentication Failure Analysis
|
Feature:
|
Compliance -> Logons -> Failures
|
Report:
|
Domain Account Authentication Failure Analysis
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-13
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.1.3
|
10.10.1
|
10.10.2
|
10.10.3
|
11.5.2
|
11.5.3
|
13.2.3
|
15.1.3
|
15.2.1
|
15.3.1
|
|
|
|
|
Cobit
|
PO 4.11
|
DS 5.5
|
ME 2.1
|
ME 2.5
|
|
|
|
|
|
|
|
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
164.312d
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Initial Logon With Servers Accessed
|
Feature:
|
Compliance -> Logons -> Network
|
Report:
|
n/a
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-2
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
|
ISO17799
|
10.10.1
|
10.10.2
|
10.10.3
|
15.1.5
|
|
|
|
|
|
|
|
|
|
|
|
Cobit
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
HIPAA
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Member Server Authentication
|
Feature:
|
Compliance -> Logons -> Network
|
Report:
|
n/a
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
10.2
|
10.3
|
10.5
|
10.7
|
|
|
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-13
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
|
ISO17799
|
0.5
|
10.1.3
|
10.10.1
|
10.10.2
|
10.10.3
|
10.10.4
|
11.5.2
|
11.5.3
|
13.2.3
|
15.1.3
|
15.2.1
|
15.3.1
|
|
|
|
Cobit
|
PO 4.11
|
DS 5.5
|
ME 2.1
|
ME 2.5
|
|
|
|
|
|
|
|
|
|
|
|
HIPAA
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
User Authentication And Logon Journal
|
Feature:
|
Compliance -> Logons -> Network
|
Report:
|
n/a
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-2
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
|
ISO17799
|
10.10.1
|
10.10.2
|
10.10.3
|
15.1.5
|
|
|
|
|
|
|
|
|
|
|
|
Cobit
|
PO 4.11
|
DS 5.5
|
ME 2.3
|
ME 3.4
|
ME 4.5
|
|
|
|
|
|
|
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
164.312d
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
User Logons By Server-Type
|
Feature:
|
Compliance -> Logons -> By Type
|
Report:
|
Logons: By Server-Type
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PCI
|
10.1
|
10.2
|
10.3
|
10.5
|
10.6
|
10.7
|
|
|
|
|
|
|
|
|
|
FISMA / NIST 800 53
|
AC-2
|
AU-2
|
AU-3
|
AU-6
|
AU-7
|
AU-9
|
|
|
|
|
|
|
|
|
|
ISO17799
|
10.10.1
|
10.10.2
|
10.10.3
|
15.1.5
|
|
|
|
|
|
|
|
|
|
|
|
Cobit
|
PO 4.11
|
DS 5.5
|
ME 2.3
|
ME 2.5
|
ME 3.4
|
ME 4.5
|
|
|
|
|
|
|
|
|
|
HIPAA
|
164.306
|
164.308a
|
164.312a
|
164.312b
|
|
|
|
|
|
|
|
|
|
|
|
