• Monitor Active Directory (AD) and Group Policy Object (GPO) changes in real time
• Instantly notify administrators on inappropriate AD modifications that could put your organization at risk
• See the ‘WHO, WHAT, WHERE, WHEN’ – complete with before and after values and the originating IP address – for every modification or event
• Comply with regulations (HIPAA, SOX, PCI, GLBA and more) by capturing AD change activity in centralized auditing database
• Schedule audit reporting with automated delivery to administrators, security officers and business data owners.
• Improve employee productivity by minimizing user/system downtime caused by errant changes

When it comes to AD and GPO configurations, a single change can put your organization at risk – impacting productivity and introducing the costly risk of security breaches and non-compliance. Yet, built-in AD auditing capabilities are cumbersome and lack centralized auditing and reporting. Careful analysis of multi-megabyte security logs require enormous resources and still fails to paint the entire picture of AD activity.

Blackbird auditor brings a new level of centralized control and ease to AD auditing and compliance. The powerful solution monitors AD and GPO changes in real time – tracking the “WHO, WHAT, WHERE, WHEN” for any modification. For every event, Blackbird captures the before and after values to clearly highlight the change. Additionally, unlike other Active Directory auditing solutions, Blackbird auditor provides the originating IP address of the computer where a change was made – enabling administrators to more accurately and rapidly isolate root cause users or programs that may be making inappropriate changes to your environment.

Blackbird’s advanced change monitoring capabilities ensure your organizations is complying with external regulations or internal security initiatives, as well as prove to auditors that corporate policies for compliance has not deviated over time. Its built-in reporting library offers out-of-the box reporting templates, while the custom reporting wizard makes it easy to create custom reports and alerts on any AD change, including flexible filtering on every field. With Blackbird’s scheduled reporting, you can run reports against the central database and automatically email reports to administrators, security officers and business data owners. And Blackbird auditor translates all events into simple English that can be easily understood by non-administrators, including security and compliance officers.

Audit and Rollback ScreenCam

See first hand how easy it is to recover from inadvertent Active Directory deletions or modifications with the Blackbird Management Suite.

Integrated Forensics - Audit Trial ScreenCam

Take a look at Blackbird auditor's Active Directory audit trail. Simply right click on any AD object to view all the recent changes and event details. 

Integrated Forensics - Show Activity ScreenCam

With Blackbird auditor, you can easily see all activity and changes for any object. This screencam shows how you can use Blackbird auditor to identify and resolve Active Directory problems. 

Realtime Alerting and Protection ScreenCam

Watch how the Blackbird Management Suite allows administrators to configure real-time AD policy enforcement with alerting and protection policies.  

Custom Audit View Creation ScreenCam

See how you can get the most out of Blackbird auditor’s data – use  customized views to receive exactly the results you want. For  example, track all changes by a specific administrator or respond to  specific requests by compliance officers.