Report on temporary group memberships

Background / Value

AD Logga closes a number of important security gaps. One of the most important one is temporary group memberships. Insider threats grant themselves access to secret directories, copy data and then revert back to the original state after performing their desired actions. Without the AD Logga these types of activities remain undetected.

 

Related features

Analyze AD Logga events with the logbook

Set alerts for groups

Set alerts for user accounts

 

Step-by-step process

  1. Select "Start".
  2. Click on "AD Logga Report".

 

  1. Enter a title for the report and add a comment.
  2. Define the range of the report. For the event type select "Member added" and "Member removed".
  3. Define the desired output settings.
  4. Start the report.