Report on temporary group memberships
Background / Value
AD Logga closes a number of important security gaps. One of the most important one is temporary group memberships. Insider threats grant themselves access to secret directories, copy data and then revert back to the original state after performing their desired actions. Without the AD Logga these types of activities remain undetected.
Related features
Analyze AD Logga events with the logbook
Step-by-step process
- Select "Start".
- Click on "AD Logga Report".
- Enter a title for the report and add a comment.
- Define the range of the report. For the event type select "Member added" and "Member removed".
- Define the desired output settings.
- Start the report.