Identify temporary group memberships

<< Display table of contents >>

Navigation:  Start > Using 8MAN - The Services > Security Monitoring > Active Directory > +8MATE AD Logga >

Identify temporary group memberships

Background / Value

8MATE Logga closes a number of important security gaps. One of the most important one is temporary group memberships. Insider threats grant themselves access to secret directories, copy data and then revert back to the original state after performing their desired actions. Without the AD Logga these types of activities remain undetected.

 

Additional Services

Analyze AD Logga events with the logbook

Set alerts for groups

Set alerts for user accounts

 

Step by step process

C001-01 EN Änderungen im Active Directory überwachen

 

1.Select "Start".

2.Click on "AD Logga Report".




C002-02 EN Temporäre Gruppenmitgliedschaften erkennen

 

1.Enter a title for the report and add a comment.

2.Define the range of the report. For the event type select "member added" and "member removed".

3.Define the desired report settings.

4.Start the report.