Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents
minLevel2
maxLevel2
typeflat

Purpose

The Activeboard performs detailed system-level analysis on the Windows host by analyzing system events, account login statuses, and policy changes.

Pre-requisites

To run this Activeboard, you must have the following data sources available on your domain:

Open Windows System Audit Audit Activeboard

Once you have installed the application, you can access the Activeboard in the following ways:

Go to Exchange in the navigation and look for the Activeboard you want to open. Click Open.

Go to Activeboards in the navigation pane and use the filter to open the Activeboard you downloaded.

Info

Know more about Activeboards

Refer to Manage and filter Activeboards article to know how to work with Activeboards.

Exploring the Activeboard

When opening the Windows System Audit Activeboard, the following info display:

Expand
titleClick here to see the details
Image Removed

Widget

Details

Filter by Host

Total Audit Success

Total Audit Failures

Events Over Time

Account logons

Accounts with 10 or more failed loggons per hour

More Recent Audit Events

Processes created

Audit Policy changes