Active Directory Auditing: Blackbird auditor for Active Directory

When it comes to Active Directory and GPO configurations, a single change can put your organization at risk – impacting productivity and introducing the costly risk of security breaches and non-compliance. Yet, built-in Active Directory auditing capabilities are cumbersome and lack centralized auditing and reporting. Careful analysis of multi-megabyte security logs requires enormous resources and still fails to paint the entire picture of AD activity.

Blackbird auditor brings a new level of centralized control and ease to Active Directory auditing and compliance. Advanced change monitoring capabilities ensure your organizations is complying with external regulations or internal security initiatives, as well as prove to auditors that corporate policies for compliance have not deviated over time. Its built-in reporting library offers out-of-the box reporting templates, while the custom reporting wizard makes it easy to create custom reports and alerts on any AD change, including flexible filtering on every field. With Blackbird’s scheduled reporting, you can run reports against the central database and automatically email reports to administrators, security officers and business data owners. And Blackbird auditor translates all events into simple English that can be easily understood by non-administrators, including security and compliance officers.

Blackbird auditor is a powerful Active Directory audit tool that tracks the "WHO, WHAT, WHERE, WHEN" for Active Directory (AD) and Group Policy (GPO) changes. With real-time AD auditing and automated alerts, administrators are instantly notified of inappropriate modifications that could put the organization at risk. Blackbird auditor captures all change activity across the enterprise in a centralized auditing database. There's a built-in reporting library with out-of-the-box templates, a custom report wizard, scheduled reporting —making it easy to schedule and send reports to admins, security officers and business data owners.

Benefits:

  • Monitor AD and GPO changes in real time
  • Instant alerts on inappropriate AD modifications that could put your organization at risk
  • See the ‘WHO, WHAT, WHERE, WHEN’ for every modification or event
  • Capture all AD change activity in a centralized auditing database
  • Schedule audit reporting with automated delivery
before and after

For every event, Blackbird captures the before and after values to clearly highlight the change.

originating IP address

By showing the originating IP address or hostname where a change was made, Blackbird auditor lets you easily isolate root cause users or programs that may be making inappropriate changes to your environment.

BBMS Architecture Diagram

Ensure the following software and hardware requirements are in place before installing Blackbird Management Suite.

Blackbird Management Suite can be deployed to 32-bit or 64-bit platforms.

Software Requirements for Blackbird Management Server

  • Windows Server 2003 or later, Windows Server 2008 or later
  • SQL Server 2005, SQL Server 2008 Express
  • Active Directory
  • .NET 3.5 SP1 on computers running the Blackbird client
  • GPMC where the service is installed (for GPO backup)

Software Requirements for Blackbird Client

  • Windows XP or later

Hardware Requirements for Blackbird Management Server

  • Pentium 1 GHz minimum, 2 GHz or better recommended
  • 1 GB RAM minimum, 2 GB or better recommended
  • Sufficient disk space to store GPO backups

Hardware Requirements for Blackbird Client

  • Pentium 1 GHz minimum, 2 GHz or better recommended
  • 1 GB RAM minimum, 2 GB or better recommended
x

Please Sign In or Register to download

Press ESCAPE, Click on X (right-top) or Click Out from the popup to close the popup!

x

Contact our sales office directly:

Direct: 1-212-380-1465
Toll-free: 1-866-224-8330
Email: sales@blackbird-group.com

Press ESCAPE, Click on X (right-top) or Click Out from the popup to close the popup