SlideShare a Scribd company logo
1 of 19
#1 for Change Auditing
                                Simple, Efficient, Affordable




 File System Auditing: Who Accessed
 What Files and Where?


Bob Bobel, Director of Product Management
E-mail: bob.bobel@netwrix.com
Twitter: @rbobel
LinkedIn: www.linkedin.com/in/robertbobel
              #1 for Change Auditing
             Simple, Efficient, Affordable
About NetWrix Corporation
•   Founded in 2006 HQ located in New Jersey
•   Philosophy - Simple, Efficient and Affordable
•   Global customer base of approximately 6000
•   As of 2011 approximately 6M licenses sold
•   Focused on Auditing with an R&D to staff ratio 3:1
•   Offices in North America, UK and APACJ
•   Microsoft Gold Certified Partner



            #1 for Change Auditing
            Simple, Efficient, Affordable
Agenda
• Challenges of File System Auditing
• Benefits of File System Auditing
• Solution Requirements
• Introducing NetWrix File Server Change
  Reporter
• Demonstration
• Why NetWrix?
• Questions

        #1 for Change Auditing
        Simple, Efficient, Affordable
Challenges of File System Auditing
• Event data can be complex and time consuming to
  collect and manage
• Native audit logs lack key information and is often
  confusing
• Native tools don’t provide point-in-time or
  configuration reporting
• Large volumes of data
• Permissions not assigned centrally
• Data ownership is in question

         #1 for Change Auditing
         Simple, Efficient, Affordable
Benefits of File System Auditing
• Efficiently meet Access Governance, Legal or
  regulatory Compliance
• Improve Security
• Increase oversight of user activity

 Quickly can you answer: Who accessed What
           files, When and Where?

         #1 for Change Auditing
         Simple, Efficient, Affordable
Solution Requirements
• Centralized Auditing of File & folder Access
• Simply and efficiently display key
  WHO, WHAT, WHEN and WHERE changes
  details with both BEFORE and AFTER values
• Efficient sort term and long term storage of data
• Support for popular storage devices
  (EMC/NetApp)


         #1 for Change Auditing
         Simple, Efficient, Affordable
Solution Requirements (continued)
•   Predefined reports (Not offered natively)
•   Compliance-ready reports
•   Report customization
•   Report subscriptions
•   Human-readable output




           #1 for Change Auditing
           Simple, Efficient, Affordable
Introducing…
NetWrix File Server Change Reporter
Unified Auditing for Files and Folders

• Simple – Easy to use, installs in minutes &
  built on NetWrix Change Reporter platform
• Efficient - lightweight architecture without
  dangerous agents or OS level drivers
• Affordable - modular and part of the NetWrix
  Change Reporter Suite


            #1 for Change Auditing
            Simple, Efficient, Affordable
Features & Benefits
•   Real-time alerts
•   File Restore
•   DFS support
•   NetApp Filer
•   EMC Celerra/VNX
•   Other CIFS-compliant hardware
•   Included in the NetWrix Change Reporter
    Suite

          #1 for Change Auditing
          Simple, Efficient, Affordable
Features and Benefits
Audit data we collect AuditAssurance™
• Configuration
• Native Events
• Other

Scalable Storage
• The Backbone of reporting
• Normalized the 4W details of Who, What, When and
  Where across systems and applications
  AuditIntellegence™
• Searchable and supports custom reports
          #1 for Change Auditing
          Simple, Efficient, Affordable
Features and Benefits
Analysis & Reporting
• Pre-built reports many designed from customer
  feedback
• View on-screen, over the Web, Export in various
  formats & subscriptions for automation
• Clearly displays 4W detail Who, What, When
  and Where
• Uses Microsoft SQL Reporting Services
        #1 for Change Auditing
        Simple, Efficient, Affordable
Features and Benefits
AuditArchive™
• Configurable Retention Policy
  – Store years of data, competitors may only store
    months of data
• Can be accessed when needed for historical
  purposes (import)



         #1 for Change Auditing
         Simple, Efficient, Affordable
NetWrix AAA Technology Platform
  AuditAssurance™ technology consolidates audit
  data from multiple independent sources, filling-
  in key details not present in any single source.

  AuditIntelligence™ technology provides a
  complete audit picture by transforming raw audit
  data into meaningful and actionable intelligence.

  AuditArchive™ technology provides long-term
  archiving, making your data available for
  historical reporting and forensics analysis.
        #1 for Change Auditing
        Simple, Efficient, Affordable
#1 for Change Auditing
                       Simple, Efficient, Affordable




Demonstration




    #1 for Change Auditing
    Simple, Efficient, Affordable
Others who chose NetWrix
    Financial                                             Federal, State & Local Government
    •    ING Direct                                   •     Columbia University
    •    Forex Capital Markets                        •     Bureau of National Affairs
    •    Berkshire Hathaway                           •     State of Maine
    •    Zurich Financial Services                    •     NYC Dept. of Transportation
    •    Thomson Reuters                              •     US District Court, SDNY
    •    Fiserv                                       •     Massachusetts Port Authority
                                                      •     Alaska State Legislature
    Healthcare & Pharmaceutical                       •     Columbia University
•       Vertex Pharmaceuticals                        •     Verizon Business Systems
•       Blue Cross of Idaho                           •     Black & Decker
•       Berkeley National Laboratory                  •     Universal NBC
•       National Institute of Health (NIH)            •     US Military Academy
•       Massachusetts General Hospital
•       WebMD


                      #1 for Change Auditing
                      Simple, Efficient, Affordable
NetWrix Suites
                       All-in-One Suite
      Change Reporter Suite                           IDM Suite
 Active Directory          SharePoint          Password Manager
 Object Restore            SQL Server          Password Expiration
 Group Policy              Windows Server      Notifier
 Exchange                  VMware              Logon Reporter
 Mailbox Access            Event Log Manager   Inactive Users Tracker
 File Servers              Activity Recorder
 NetApp & EMC                                    FREE Trials at
                                                www.netwrix.com

            #1 for Change Auditing
            Simple, Efficient, Affordable
Protect your investment
• Upgrade to any suite = 100% credit applied
  from any prior license purchase

• New product additions to suites are provided
  to you at no charge so long as support and
  maintenance fees are current



        #1 for Change Auditing
        Simple, Efficient, Affordable
Next Steps…
• Download a FREE TRIAL at www.netwrix.com
  – Trial license is included with the download
  – Support is provided during trial period


• Virtual POC
  – Virtual TestDrive™ is available in some areas
  – Online server allows you to quickly understand the
    incredible value of our software

         #1 for Change Auditing
         Simple, Efficient, Affordable
#1 for Change Auditing
                                  Simple, Efficient, Affordable




  Thank you

  For more information visit www.netwrix.com



Bob Bobel, Director of Product Management
E-mail: bob.bobel@netwrix.com
Twitter: @rbobel
LinkedIn: www.linkedin.com/in/robertbobel
               #1 for Change Auditing
               Simple, Efficient, Affordable

More Related Content

What's hot

#MFSummit2016 Secure: Mind the gap strengthening the information security model
#MFSummit2016 Secure: Mind the gap strengthening the information security model#MFSummit2016 Secure: Mind the gap strengthening the information security model
#MFSummit2016 Secure: Mind the gap strengthening the information security modelMicro Focus
 
#MFSummit2016 Secure: Is your mainframe less secure than your fileserver
#MFSummit2016 Secure: Is your mainframe less secure than your fileserver#MFSummit2016 Secure: Is your mainframe less secure than your fileserver
#MFSummit2016 Secure: Is your mainframe less secure than your fileserverMicro Focus
 
Designing Flexibility in Software to Increase Security
Designing Flexibility in Software to Increase SecurityDesigning Flexibility in Software to Increase Security
Designing Flexibility in Software to Increase Securitylawmoore
 
Bright talk mapping the right aut solution for you 2014 final (1)
Bright talk mapping the right aut solution for you 2014 final (1)Bright talk mapping the right aut solution for you 2014 final (1)
Bright talk mapping the right aut solution for you 2014 final (1)Sectricity
 
Event Driven Architecture – Enabling Microservices
Event Driven Architecture – Enabling MicroservicesEvent Driven Architecture – Enabling Microservices
Event Driven Architecture – Enabling MicroservicesBradley Irby
 
#MFSummit2016 Operate: Towards a unified endpoint management strategy
#MFSummit2016 Operate: Towards a unified endpoint management strategy#MFSummit2016 Operate: Towards a unified endpoint management strategy
#MFSummit2016 Operate: Towards a unified endpoint management strategyMicro Focus
 
A Year of “Testing” the Cloud for Development and Test
A Year of “Testing” the Cloud for Development and TestA Year of “Testing” the Cloud for Development and Test
A Year of “Testing” the Cloud for Development and TestTechWell
 
#MFSummit2016 Operate: Solving desktop challenges with application virtualisa...
#MFSummit2016 Operate: Solving desktop challenges with application virtualisa...#MFSummit2016 Operate: Solving desktop challenges with application virtualisa...
#MFSummit2016 Operate: Solving desktop challenges with application virtualisa...Micro Focus
 
PROTECT AND SURVIVE – SAFEGUARDING YOUR INFORMATION ASSETS - #MFSummit2017
PROTECT AND SURVIVE – SAFEGUARDING YOUR INFORMATION ASSETS - #MFSummit2017PROTECT AND SURVIVE – SAFEGUARDING YOUR INFORMATION ASSETS - #MFSummit2017
PROTECT AND SURVIVE – SAFEGUARDING YOUR INFORMATION ASSETS - #MFSummit2017Micro Focus
 
UNIFIED ENDPOINT MANAGEMENT. WHAT IT IS AND WHY IT’S IMPORTANT
UNIFIED ENDPOINT MANAGEMENT. WHAT IT IS AND WHY IT’S IMPORTANTUNIFIED ENDPOINT MANAGEMENT. WHAT IT IS AND WHY IT’S IMPORTANT
UNIFIED ENDPOINT MANAGEMENT. WHAT IT IS AND WHY IT’S IMPORTANTMicro Focus
 
Non-functional Issues in Cloud Based Systems by Kees Blokland and Martin Pol
Non-functional Issues in Cloud Based Systems by Kees Blokland and Martin PolNon-functional Issues in Cloud Based Systems by Kees Blokland and Martin Pol
Non-functional Issues in Cloud Based Systems by Kees Blokland and Martin PolKees Blokland
 
Sys track customer facing-terminal server-updated
Sys track   customer facing-terminal server-updatedSys track   customer facing-terminal server-updated
Sys track customer facing-terminal server-updatedSyntax Inc.
 
VMworld 2013: The Software Defined Datacenter Meets End User Computing
VMworld 2013: The Software Defined Datacenter Meets End User Computing VMworld 2013: The Software Defined Datacenter Meets End User Computing
VMworld 2013: The Software Defined Datacenter Meets End User Computing VMworld
 
#MFSummit2016 Operate: Introduction to software collaboration and networking
#MFSummit2016 Operate: Introduction to software collaboration and networking#MFSummit2016 Operate: Introduction to software collaboration and networking
#MFSummit2016 Operate: Introduction to software collaboration and networkingMicro Focus
 
From Relational Database Management to Big Data: Solutions for Data Migration...
From Relational Database Management to Big Data: Solutions for Data Migration...From Relational Database Management to Big Data: Solutions for Data Migration...
From Relational Database Management to Big Data: Solutions for Data Migration...Cognizant
 
Your Biggest Systems Management Challenges – and How to Overcome Them
Your Biggest Systems Management Challenges – and How to Overcome ThemYour Biggest Systems Management Challenges – and How to Overcome Them
Your Biggest Systems Management Challenges – and How to Overcome ThemQuest
 
Complex End-to-End Testing
Complex End-to-End TestingComplex End-to-End Testing
Complex End-to-End TestingErika Barron
 
Downtime is Not an Option: Integrating IBM Z into ServiceNow and Splunk
Downtime is Not an Option: Integrating IBM Z into ServiceNow and SplunkDowntime is Not an Option: Integrating IBM Z into ServiceNow and Splunk
Downtime is Not an Option: Integrating IBM Z into ServiceNow and SplunkPrecisely
 
How to achieve Continous Delivery
How to achieve Continous DeliveryHow to achieve Continous Delivery
How to achieve Continous DeliveryGeoffrey Vandiest
 

What's hot (20)

#MFSummit2016 Secure: Mind the gap strengthening the information security model
#MFSummit2016 Secure: Mind the gap strengthening the information security model#MFSummit2016 Secure: Mind the gap strengthening the information security model
#MFSummit2016 Secure: Mind the gap strengthening the information security model
 
#MFSummit2016 Secure: Is your mainframe less secure than your fileserver
#MFSummit2016 Secure: Is your mainframe less secure than your fileserver#MFSummit2016 Secure: Is your mainframe less secure than your fileserver
#MFSummit2016 Secure: Is your mainframe less secure than your fileserver
 
Designing Flexibility in Software to Increase Security
Designing Flexibility in Software to Increase SecurityDesigning Flexibility in Software to Increase Security
Designing Flexibility in Software to Increase Security
 
Bright talk mapping the right aut solution for you 2014 final (1)
Bright talk mapping the right aut solution for you 2014 final (1)Bright talk mapping the right aut solution for you 2014 final (1)
Bright talk mapping the right aut solution for you 2014 final (1)
 
Event Driven Architecture – Enabling Microservices
Event Driven Architecture – Enabling MicroservicesEvent Driven Architecture – Enabling Microservices
Event Driven Architecture – Enabling Microservices
 
#MFSummit2016 Operate: Towards a unified endpoint management strategy
#MFSummit2016 Operate: Towards a unified endpoint management strategy#MFSummit2016 Operate: Towards a unified endpoint management strategy
#MFSummit2016 Operate: Towards a unified endpoint management strategy
 
A Year of “Testing” the Cloud for Development and Test
A Year of “Testing” the Cloud for Development and TestA Year of “Testing” the Cloud for Development and Test
A Year of “Testing” the Cloud for Development and Test
 
#MFSummit2016 Operate: Solving desktop challenges with application virtualisa...
#MFSummit2016 Operate: Solving desktop challenges with application virtualisa...#MFSummit2016 Operate: Solving desktop challenges with application virtualisa...
#MFSummit2016 Operate: Solving desktop challenges with application virtualisa...
 
PROTECT AND SURVIVE – SAFEGUARDING YOUR INFORMATION ASSETS - #MFSummit2017
PROTECT AND SURVIVE – SAFEGUARDING YOUR INFORMATION ASSETS - #MFSummit2017PROTECT AND SURVIVE – SAFEGUARDING YOUR INFORMATION ASSETS - #MFSummit2017
PROTECT AND SURVIVE – SAFEGUARDING YOUR INFORMATION ASSETS - #MFSummit2017
 
UNIFIED ENDPOINT MANAGEMENT. WHAT IT IS AND WHY IT’S IMPORTANT
UNIFIED ENDPOINT MANAGEMENT. WHAT IT IS AND WHY IT’S IMPORTANTUNIFIED ENDPOINT MANAGEMENT. WHAT IT IS AND WHY IT’S IMPORTANT
UNIFIED ENDPOINT MANAGEMENT. WHAT IT IS AND WHY IT’S IMPORTANT
 
Non-functional Issues in Cloud Based Systems by Kees Blokland and Martin Pol
Non-functional Issues in Cloud Based Systems by Kees Blokland and Martin PolNon-functional Issues in Cloud Based Systems by Kees Blokland and Martin Pol
Non-functional Issues in Cloud Based Systems by Kees Blokland and Martin Pol
 
Sys track customer facing-terminal server-updated
Sys track   customer facing-terminal server-updatedSys track   customer facing-terminal server-updated
Sys track customer facing-terminal server-updated
 
VMworld 2013: The Software Defined Datacenter Meets End User Computing
VMworld 2013: The Software Defined Datacenter Meets End User Computing VMworld 2013: The Software Defined Datacenter Meets End User Computing
VMworld 2013: The Software Defined Datacenter Meets End User Computing
 
#MFSummit2016 Operate: Introduction to software collaboration and networking
#MFSummit2016 Operate: Introduction to software collaboration and networking#MFSummit2016 Operate: Introduction to software collaboration and networking
#MFSummit2016 Operate: Introduction to software collaboration and networking
 
From Relational Database Management to Big Data: Solutions for Data Migration...
From Relational Database Management to Big Data: Solutions for Data Migration...From Relational Database Management to Big Data: Solutions for Data Migration...
From Relational Database Management to Big Data: Solutions for Data Migration...
 
Lakeside 2016
Lakeside   2016Lakeside   2016
Lakeside 2016
 
Your Biggest Systems Management Challenges – and How to Overcome Them
Your Biggest Systems Management Challenges – and How to Overcome ThemYour Biggest Systems Management Challenges – and How to Overcome Them
Your Biggest Systems Management Challenges – and How to Overcome Them
 
Complex End-to-End Testing
Complex End-to-End TestingComplex End-to-End Testing
Complex End-to-End Testing
 
Downtime is Not an Option: Integrating IBM Z into ServiceNow and Splunk
Downtime is Not an Option: Integrating IBM Z into ServiceNow and SplunkDowntime is Not an Option: Integrating IBM Z into ServiceNow and Splunk
Downtime is Not an Option: Integrating IBM Z into ServiceNow and Splunk
 
How to achieve Continous Delivery
How to achieve Continous DeliveryHow to achieve Continous Delivery
How to achieve Continous Delivery
 

Viewers also liked

Office 365 presentation
Office 365 presentationOffice 365 presentation
Office 365 presentationSaed Shela
 
Ode to My Pen: Ben Goss
Ode to My Pen: Ben GossOde to My Pen: Ben Goss
Ode to My Pen: Ben GossSengage
 
To my granddaughters
To my granddaughtersTo my granddaughters
To my granddaughtersMemomscott
 
SF SANIT Oława
SF SANIT OławaSF SANIT Oława
SF SANIT OławasalonyVi
 
Inquiry Committee meeting 1 - feb 3, 2014
Inquiry Committee   meeting 1 - feb 3, 2014Inquiry Committee   meeting 1 - feb 3, 2014
Inquiry Committee meeting 1 - feb 3, 2014Adam Caplan
 
Lena Ramdas Portfolio
Lena Ramdas PortfolioLena Ramdas Portfolio
Lena Ramdas PortfolioLena Ramdas
 
KUS-AN Tadeusz Kuś
KUS-AN Tadeusz KuśKUS-AN Tadeusz Kuś
KUS-AN Tadeusz KuśsalonyVi
 
Moviegoer uq presentation
Moviegoer uq presentationMoviegoer uq presentation
Moviegoer uq presentationbratajczak21
 
The Professional Professional Sales Person
The Professional Professional Sales PersonThe Professional Professional Sales Person
The Professional Professional Sales PersonRichard Marcus
 
DID YOU KNOW ?
DID YOU KNOW ?DID YOU KNOW ?
DID YOU KNOW ?IGRIV
 
Altom Wrocław
Altom WrocławAltom Wrocław
Altom WrocławsalonyVi
 
Teresita examen informatica 4to semestre
Teresita examen informatica 4to semestreTeresita examen informatica 4to semestre
Teresita examen informatica 4to semestrenenavirgo
 

Viewers also liked (19)

Office 365 presentation
Office 365 presentationOffice 365 presentation
Office 365 presentation
 
Pengertian internet
Pengertian internetPengertian internet
Pengertian internet
 
Ode to My Pen: Ben Goss
Ode to My Pen: Ben GossOde to My Pen: Ben Goss
Ode to My Pen: Ben Goss
 
U7 1ME108
U7 1ME108 U7 1ME108
U7 1ME108
 
To my granddaughters
To my granddaughtersTo my granddaughters
To my granddaughters
 
SF SANIT Oława
SF SANIT OławaSF SANIT Oława
SF SANIT Oława
 
Inquiry Committee meeting 1 - feb 3, 2014
Inquiry Committee   meeting 1 - feb 3, 2014Inquiry Committee   meeting 1 - feb 3, 2014
Inquiry Committee meeting 1 - feb 3, 2014
 
Lena Ramdas Portfolio
Lena Ramdas PortfolioLena Ramdas Portfolio
Lena Ramdas Portfolio
 
KUS-AN Tadeusz Kuś
KUS-AN Tadeusz KuśKUS-AN Tadeusz Kuś
KUS-AN Tadeusz Kuś
 
Portfolio 2011 2
Portfolio 2011 2Portfolio 2011 2
Portfolio 2011 2
 
TEST_rev
TEST_revTEST_rev
TEST_rev
 
Moviegoer uq presentation
Moviegoer uq presentationMoviegoer uq presentation
Moviegoer uq presentation
 
PR for Startups
PR for StartupsPR for Startups
PR for Startups
 
The Professional Professional Sales Person
The Professional Professional Sales PersonThe Professional Professional Sales Person
The Professional Professional Sales Person
 
DID YOU KNOW ?
DID YOU KNOW ?DID YOU KNOW ?
DID YOU KNOW ?
 
Sarojkumar cv
Sarojkumar cvSarojkumar cv
Sarojkumar cv
 
Altom Wrocław
Altom WrocławAltom Wrocław
Altom Wrocław
 
Rpt bi form 2 2011
Rpt bi form 2  2011Rpt bi form 2  2011
Rpt bi form 2 2011
 
Teresita examen informatica 4to semestre
Teresita examen informatica 4to semestreTeresita examen informatica 4to semestre
Teresita examen informatica 4to semestre
 

Similar to File system auditing who accessed what files and where

Characerizing and Validating QoS in the Emerging IoT Network
Characerizing and Validating QoS in the Emerging IoT NetworkCharacerizing and Validating QoS in the Emerging IoT Network
Characerizing and Validating QoS in the Emerging IoT NetworkHans Ashlock
 
Oracle Insurance ERP.ppt
Oracle Insurance ERP.pptOracle Insurance ERP.ppt
Oracle Insurance ERP.pptJd Ash
 
Billable hours (public)
Billable hours (public)Billable hours (public)
Billable hours (public)James Makumbi
 
Testing the Migration of Monolithic Applications to Microservices on the Cloud
Testing the Migration of Monolithic Applications to Microservices on the CloudTesting the Migration of Monolithic Applications to Microservices on the Cloud
Testing the Migration of Monolithic Applications to Microservices on the CloudNagarro
 
Microsoft India - Unified Communications Exchange Server 2010 Competitive Adv...
Microsoft India - Unified Communications Exchange Server 2010 Competitive Adv...Microsoft India - Unified Communications Exchange Server 2010 Competitive Adv...
Microsoft India - Unified Communications Exchange Server 2010 Competitive Adv...Microsoft Private Cloud
 
Selecting and Implementing Insurance Advertising Compliance Technology Solutions
Selecting and Implementing Insurance Advertising Compliance Technology SolutionsSelecting and Implementing Insurance Advertising Compliance Technology Solutions
Selecting and Implementing Insurance Advertising Compliance Technology SolutionsMark F. Catone
 
Imran Zahid Hussain Dalvi
Imran Zahid Hussain DalviImran Zahid Hussain Dalvi
Imran Zahid Hussain DalviImran Dalvi
 
Version1 database-managed-services-brochure
Version1 database-managed-services-brochureVersion1 database-managed-services-brochure
Version1 database-managed-services-brochureVersion 1
 
Fishbowl Solutions Webinar: A Path, Package, and Promise for WebCenter Conten...
Fishbowl Solutions Webinar: A Path, Package, and Promise for WebCenter Conten...Fishbowl Solutions Webinar: A Path, Package, and Promise for WebCenter Conten...
Fishbowl Solutions Webinar: A Path, Package, and Promise for WebCenter Conten...Fishbowl Solutions
 
CASE STUDY: UK NATIONAL HEALTH SERVICE
CASE STUDY: UK NATIONAL HEALTH SERVICECASE STUDY: UK NATIONAL HEALTH SERVICE
CASE STUDY: UK NATIONAL HEALTH SERVICEForgeRock
 
Tpm cloud collaboration network security
Tpm   cloud collaboration network securityTpm   cloud collaboration network security
Tpm cloud collaboration network securityDavid Brunke
 
Wasserman Keynote at ICSSP 2013
Wasserman Keynote at ICSSP 2013Wasserman Keynote at ICSSP 2013
Wasserman Keynote at ICSSP 2013twasserman
 
Pros & Cons of Microservices Architecture
Pros & Cons of Microservices ArchitecturePros & Cons of Microservices Architecture
Pros & Cons of Microservices ArchitectureAshwini Kuntamukkala
 
Non functional requirements. do we really care…?
Non functional requirements. do we really care…?Non functional requirements. do we really care…?
Non functional requirements. do we really care…?OSSCube
 
How to Restructure and Modernize Active Directory
How to Restructure and Modernize Active DirectoryHow to Restructure and Modernize Active Directory
How to Restructure and Modernize Active DirectoryQuest
 
Security on AWS, 2021 Edition Meetup
Security on AWS, 2021 Edition MeetupSecurity on AWS, 2021 Edition Meetup
Security on AWS, 2021 Edition MeetupCloudHesive
 
Security on AWS, 2021 Edition Meetup
Security on AWS, 2021 Edition MeetupSecurity on AWS, 2021 Edition Meetup
Security on AWS, 2021 Edition MeetupCloudHesive
 
Zero to ten million daily users in four weeks: sustainable speed is king
Zero to ten million daily users in four weeks: sustainable speed is kingZero to ten million daily users in four weeks: sustainable speed is king
Zero to ten million daily users in four weeks: sustainable speed is kingplumbee
 
Infrastructure as code with test approach
Infrastructure as code with test approachInfrastructure as code with test approach
Infrastructure as code with test approachEnrique Carbonell
 

Similar to File system auditing who accessed what files and where (20)

Characerizing and Validating QoS in the Emerging IoT Network
Characerizing and Validating QoS in the Emerging IoT NetworkCharacerizing and Validating QoS in the Emerging IoT Network
Characerizing and Validating QoS in the Emerging IoT Network
 
Oracle Insurance ERP.ppt
Oracle Insurance ERP.pptOracle Insurance ERP.ppt
Oracle Insurance ERP.ppt
 
Billable hours (public)
Billable hours (public)Billable hours (public)
Billable hours (public)
 
Testing the Migration of Monolithic Applications to Microservices on the Cloud
Testing the Migration of Monolithic Applications to Microservices on the CloudTesting the Migration of Monolithic Applications to Microservices on the Cloud
Testing the Migration of Monolithic Applications to Microservices on the Cloud
 
Microsoft India - Unified Communications Exchange Server 2010 Competitive Adv...
Microsoft India - Unified Communications Exchange Server 2010 Competitive Adv...Microsoft India - Unified Communications Exchange Server 2010 Competitive Adv...
Microsoft India - Unified Communications Exchange Server 2010 Competitive Adv...
 
Selecting and Implementing Insurance Advertising Compliance Technology Solutions
Selecting and Implementing Insurance Advertising Compliance Technology SolutionsSelecting and Implementing Insurance Advertising Compliance Technology Solutions
Selecting and Implementing Insurance Advertising Compliance Technology Solutions
 
142 wendy shank
142 wendy shank142 wendy shank
142 wendy shank
 
Imran Zahid Hussain Dalvi
Imran Zahid Hussain DalviImran Zahid Hussain Dalvi
Imran Zahid Hussain Dalvi
 
Version1 database-managed-services-brochure
Version1 database-managed-services-brochureVersion1 database-managed-services-brochure
Version1 database-managed-services-brochure
 
Fishbowl Solutions Webinar: A Path, Package, and Promise for WebCenter Conten...
Fishbowl Solutions Webinar: A Path, Package, and Promise for WebCenter Conten...Fishbowl Solutions Webinar: A Path, Package, and Promise for WebCenter Conten...
Fishbowl Solutions Webinar: A Path, Package, and Promise for WebCenter Conten...
 
CASE STUDY: UK NATIONAL HEALTH SERVICE
CASE STUDY: UK NATIONAL HEALTH SERVICECASE STUDY: UK NATIONAL HEALTH SERVICE
CASE STUDY: UK NATIONAL HEALTH SERVICE
 
Tpm cloud collaboration network security
Tpm   cloud collaboration network securityTpm   cloud collaboration network security
Tpm cloud collaboration network security
 
Wasserman Keynote at ICSSP 2013
Wasserman Keynote at ICSSP 2013Wasserman Keynote at ICSSP 2013
Wasserman Keynote at ICSSP 2013
 
Pros & Cons of Microservices Architecture
Pros & Cons of Microservices ArchitecturePros & Cons of Microservices Architecture
Pros & Cons of Microservices Architecture
 
Non functional requirements. do we really care…?
Non functional requirements. do we really care…?Non functional requirements. do we really care…?
Non functional requirements. do we really care…?
 
How to Restructure and Modernize Active Directory
How to Restructure and Modernize Active DirectoryHow to Restructure and Modernize Active Directory
How to Restructure and Modernize Active Directory
 
Security on AWS, 2021 Edition Meetup
Security on AWS, 2021 Edition MeetupSecurity on AWS, 2021 Edition Meetup
Security on AWS, 2021 Edition Meetup
 
Security on AWS, 2021 Edition Meetup
Security on AWS, 2021 Edition MeetupSecurity on AWS, 2021 Edition Meetup
Security on AWS, 2021 Edition Meetup
 
Zero to ten million daily users in four weeks: sustainable speed is king
Zero to ten million daily users in four weeks: sustainable speed is kingZero to ten million daily users in four weeks: sustainable speed is king
Zero to ten million daily users in four weeks: sustainable speed is king
 
Infrastructure as code with test approach
Infrastructure as code with test approachInfrastructure as code with test approach
Infrastructure as code with test approach
 

More from Netwrix Corporation

How to Effectively Audit your IT Infrastructure
How to Effectively Audit your IT InfrastructureHow to Effectively Audit your IT Infrastructure
How to Effectively Audit your IT InfrastructureNetwrix Corporation
 
Auditing Active Directory to Comply with State and Federal Regulations
Auditing Active Directory to Comply with State and Federal RegulationsAuditing Active Directory to Comply with State and Federal Regulations
Auditing Active Directory to Comply with State and Federal RegulationsNetwrix Corporation
 
Auditing Solution Enables Coaching of Staff and Pleases Auditors
Auditing Solution Enables Coaching of Staff and Pleases AuditorsAuditing Solution Enables Coaching of Staff and Pleases Auditors
Auditing Solution Enables Coaching of Staff and Pleases AuditorsNetwrix Corporation
 
Automated De-provisioning of Inactive Users Accounts
Automated De-provisioning of Inactive Users AccountsAutomated De-provisioning of Inactive Users Accounts
Automated De-provisioning of Inactive Users AccountsNetwrix Corporation
 
USB Port Protection that Hardens Endpoint Security and Streamlines Compliance
USB Port Protection that Hardens Endpoint Security and Streamlines ComplianceUSB Port Protection that Hardens Endpoint Security and Streamlines Compliance
USB Port Protection that Hardens Endpoint Security and Streamlines ComplianceNetwrix Corporation
 
How the World's Largest Date Agriculture Company "Planted" File Server Auditing
How the World's Largest Date Agriculture Company "Planted" File Server AuditingHow the World's Largest Date Agriculture Company "Planted" File Server Auditing
How the World's Largest Date Agriculture Company "Planted" File Server AuditingNetwrix Corporation
 
Ensuring Data Protection by controlling the Use of Removable Media
Ensuring Data Protection by controlling the Use of Removable MediaEnsuring Data Protection by controlling the Use of Removable Media
Ensuring Data Protection by controlling the Use of Removable MediaNetwrix Corporation
 
Leading Emergency Software Solution Provider Automates HIPAA and SOX Complian...
Leading Emergency Software Solution Provider Automates HIPAA and SOX Complian...Leading Emergency Software Solution Provider Automates HIPAA and SOX Complian...
Leading Emergency Software Solution Provider Automates HIPAA and SOX Complian...Netwrix Corporation
 
Active Directory Change Auditing in the Enterprise
Active Directory Change Auditing in the EnterpriseActive Directory Change Auditing in the Enterprise
Active Directory Change Auditing in the EnterpriseNetwrix Corporation
 
Extending Change Auditing to Exchange Server
Extending Change Auditing to Exchange ServerExtending Change Auditing to Exchange Server
Extending Change Auditing to Exchange ServerNetwrix Corporation
 
Staying Abreast of Group Policy Changes
Staying Abreast of Group Policy ChangesStaying Abreast of Group Policy Changes
Staying Abreast of Group Policy ChangesNetwrix Corporation
 
The Business Case for Account Lockout Management
The Business Case for Account Lockout ManagementThe Business Case for Account Lockout Management
The Business Case for Account Lockout ManagementNetwrix Corporation
 
Exchange Auditing in the Enterprise
Exchange Auditing in the EnterpriseExchange Auditing in the Enterprise
Exchange Auditing in the EnterpriseNetwrix Corporation
 

More from Netwrix Corporation (15)

How to Effectively Audit your IT Infrastructure
How to Effectively Audit your IT InfrastructureHow to Effectively Audit your IT Infrastructure
How to Effectively Audit your IT Infrastructure
 
Auditing Active Directory to Comply with State and Federal Regulations
Auditing Active Directory to Comply with State and Federal RegulationsAuditing Active Directory to Comply with State and Federal Regulations
Auditing Active Directory to Comply with State and Federal Regulations
 
Auditing Solution Enables Coaching of Staff and Pleases Auditors
Auditing Solution Enables Coaching of Staff and Pleases AuditorsAuditing Solution Enables Coaching of Staff and Pleases Auditors
Auditing Solution Enables Coaching of Staff and Pleases Auditors
 
Automated De-provisioning of Inactive Users Accounts
Automated De-provisioning of Inactive Users AccountsAutomated De-provisioning of Inactive Users Accounts
Automated De-provisioning of Inactive Users Accounts
 
USB Port Protection that Hardens Endpoint Security and Streamlines Compliance
USB Port Protection that Hardens Endpoint Security and Streamlines ComplianceUSB Port Protection that Hardens Endpoint Security and Streamlines Compliance
USB Port Protection that Hardens Endpoint Security and Streamlines Compliance
 
How the World's Largest Date Agriculture Company "Planted" File Server Auditing
How the World's Largest Date Agriculture Company "Planted" File Server AuditingHow the World's Largest Date Agriculture Company "Planted" File Server Auditing
How the World's Largest Date Agriculture Company "Planted" File Server Auditing
 
Ensuring Data Protection by controlling the Use of Removable Media
Ensuring Data Protection by controlling the Use of Removable MediaEnsuring Data Protection by controlling the Use of Removable Media
Ensuring Data Protection by controlling the Use of Removable Media
 
Leading Emergency Software Solution Provider Automates HIPAA and SOX Complian...
Leading Emergency Software Solution Provider Automates HIPAA and SOX Complian...Leading Emergency Software Solution Provider Automates HIPAA and SOX Complian...
Leading Emergency Software Solution Provider Automates HIPAA and SOX Complian...
 
Active Directory Change Auditing in the Enterprise
Active Directory Change Auditing in the EnterpriseActive Directory Change Auditing in the Enterprise
Active Directory Change Auditing in the Enterprise
 
Extending Change Auditing to Exchange Server
Extending Change Auditing to Exchange ServerExtending Change Auditing to Exchange Server
Extending Change Auditing to Exchange Server
 
Staying Abreast of Group Policy Changes
Staying Abreast of Group Policy ChangesStaying Abreast of Group Policy Changes
Staying Abreast of Group Policy Changes
 
The Business Case for Account Lockout Management
The Business Case for Account Lockout ManagementThe Business Case for Account Lockout Management
The Business Case for Account Lockout Management
 
Exchange Auditing in the Enterprise
Exchange Auditing in the EnterpriseExchange Auditing in the Enterprise
Exchange Auditing in the Enterprise
 
File Auditing in the Enterprise
File Auditing in the EnterpriseFile Auditing in the Enterprise
File Auditing in the Enterprise
 
File auditing on NetApp Filer
File auditing on NetApp Filer File auditing on NetApp Filer
File auditing on NetApp Filer
 

File system auditing who accessed what files and where

  • 1. #1 for Change Auditing Simple, Efficient, Affordable File System Auditing: Who Accessed What Files and Where? Bob Bobel, Director of Product Management E-mail: bob.bobel@netwrix.com Twitter: @rbobel LinkedIn: www.linkedin.com/in/robertbobel #1 for Change Auditing Simple, Efficient, Affordable
  • 2. About NetWrix Corporation • Founded in 2006 HQ located in New Jersey • Philosophy - Simple, Efficient and Affordable • Global customer base of approximately 6000 • As of 2011 approximately 6M licenses sold • Focused on Auditing with an R&D to staff ratio 3:1 • Offices in North America, UK and APACJ • Microsoft Gold Certified Partner #1 for Change Auditing Simple, Efficient, Affordable
  • 3. Agenda • Challenges of File System Auditing • Benefits of File System Auditing • Solution Requirements • Introducing NetWrix File Server Change Reporter • Demonstration • Why NetWrix? • Questions #1 for Change Auditing Simple, Efficient, Affordable
  • 4. Challenges of File System Auditing • Event data can be complex and time consuming to collect and manage • Native audit logs lack key information and is often confusing • Native tools don’t provide point-in-time or configuration reporting • Large volumes of data • Permissions not assigned centrally • Data ownership is in question #1 for Change Auditing Simple, Efficient, Affordable
  • 5. Benefits of File System Auditing • Efficiently meet Access Governance, Legal or regulatory Compliance • Improve Security • Increase oversight of user activity Quickly can you answer: Who accessed What files, When and Where? #1 for Change Auditing Simple, Efficient, Affordable
  • 6. Solution Requirements • Centralized Auditing of File & folder Access • Simply and efficiently display key WHO, WHAT, WHEN and WHERE changes details with both BEFORE and AFTER values • Efficient sort term and long term storage of data • Support for popular storage devices (EMC/NetApp) #1 for Change Auditing Simple, Efficient, Affordable
  • 7. Solution Requirements (continued) • Predefined reports (Not offered natively) • Compliance-ready reports • Report customization • Report subscriptions • Human-readable output #1 for Change Auditing Simple, Efficient, Affordable
  • 8. Introducing… NetWrix File Server Change Reporter Unified Auditing for Files and Folders • Simple – Easy to use, installs in minutes & built on NetWrix Change Reporter platform • Efficient - lightweight architecture without dangerous agents or OS level drivers • Affordable - modular and part of the NetWrix Change Reporter Suite #1 for Change Auditing Simple, Efficient, Affordable
  • 9. Features & Benefits • Real-time alerts • File Restore • DFS support • NetApp Filer • EMC Celerra/VNX • Other CIFS-compliant hardware • Included in the NetWrix Change Reporter Suite #1 for Change Auditing Simple, Efficient, Affordable
  • 10. Features and Benefits Audit data we collect AuditAssurance™ • Configuration • Native Events • Other Scalable Storage • The Backbone of reporting • Normalized the 4W details of Who, What, When and Where across systems and applications AuditIntellegence™ • Searchable and supports custom reports #1 for Change Auditing Simple, Efficient, Affordable
  • 11. Features and Benefits Analysis & Reporting • Pre-built reports many designed from customer feedback • View on-screen, over the Web, Export in various formats & subscriptions for automation • Clearly displays 4W detail Who, What, When and Where • Uses Microsoft SQL Reporting Services #1 for Change Auditing Simple, Efficient, Affordable
  • 12. Features and Benefits AuditArchive™ • Configurable Retention Policy – Store years of data, competitors may only store months of data • Can be accessed when needed for historical purposes (import) #1 for Change Auditing Simple, Efficient, Affordable
  • 13. NetWrix AAA Technology Platform AuditAssurance™ technology consolidates audit data from multiple independent sources, filling- in key details not present in any single source. AuditIntelligence™ technology provides a complete audit picture by transforming raw audit data into meaningful and actionable intelligence. AuditArchive™ technology provides long-term archiving, making your data available for historical reporting and forensics analysis. #1 for Change Auditing Simple, Efficient, Affordable
  • 14. #1 for Change Auditing Simple, Efficient, Affordable Demonstration #1 for Change Auditing Simple, Efficient, Affordable
  • 15. Others who chose NetWrix Financial Federal, State & Local Government • ING Direct • Columbia University • Forex Capital Markets • Bureau of National Affairs • Berkshire Hathaway • State of Maine • Zurich Financial Services • NYC Dept. of Transportation • Thomson Reuters • US District Court, SDNY • Fiserv • Massachusetts Port Authority • Alaska State Legislature Healthcare & Pharmaceutical • Columbia University • Vertex Pharmaceuticals • Verizon Business Systems • Blue Cross of Idaho • Black & Decker • Berkeley National Laboratory • Universal NBC • National Institute of Health (NIH) • US Military Academy • Massachusetts General Hospital • WebMD #1 for Change Auditing Simple, Efficient, Affordable
  • 16. NetWrix Suites All-in-One Suite Change Reporter Suite IDM Suite Active Directory SharePoint Password Manager Object Restore SQL Server Password Expiration Group Policy Windows Server Notifier Exchange VMware Logon Reporter Mailbox Access Event Log Manager Inactive Users Tracker File Servers Activity Recorder NetApp & EMC FREE Trials at www.netwrix.com #1 for Change Auditing Simple, Efficient, Affordable
  • 17. Protect your investment • Upgrade to any suite = 100% credit applied from any prior license purchase • New product additions to suites are provided to you at no charge so long as support and maintenance fees are current #1 for Change Auditing Simple, Efficient, Affordable
  • 18. Next Steps… • Download a FREE TRIAL at www.netwrix.com – Trial license is included with the download – Support is provided during trial period • Virtual POC – Virtual TestDrive™ is available in some areas – Online server allows you to quickly understand the incredible value of our software #1 for Change Auditing Simple, Efficient, Affordable
  • 19. #1 for Change Auditing Simple, Efficient, Affordable Thank you For more information visit www.netwrix.com Bob Bobel, Director of Product Management E-mail: bob.bobel@netwrix.com Twitter: @rbobel LinkedIn: www.linkedin.com/in/robertbobel #1 for Change Auditing Simple, Efficient, Affordable

Editor's Notes

  1. AuditAssurance™ technology consolidates the audit data from multiple independent sources (event logs, configuration snapshots, change history records, etc.), and therefore is able to detect a change even if one or more of the sources does not contain all the required data. AuditIntelligence™ technology transforms raw audit data into meaningful and actionable intelligence to drive security and compliance efforts and delivers human-readable reports designed with administrators and auditors in mind to paint the most complete picture.