Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Belkasoft Triage is an innovative tool for digital forensics and incident response, tailored for the rapid assessment of live computers while enabling the capture of essential data. This tool is particularly beneficial for investigators and first responders at the scene of an incident, allowing them to swiftly pinpoint and retrieve crucial digital evidence from Windows systems. In high-pressure scenarios where time is of the essence, this product proves invaluable by facilitating the immediate discovery of relevant information, thus providing critical investigative leads without the need for a comprehensive examination of all available digital evidence. Ultimately, Belkasoft Triage streamlines the process of evidence collection, ensuring that vital information is not overlooked in urgent situations.
Description
Quest Change Auditor is a real-time security auditing and threat monitoring solution for Active Directory and broader hybrid Microsoft environments. It monitors configuration changes, administrator actions, user activity, authentication events, and other security-relevant changes across on-premises and cloud systems. Supported environments include Active Directory, Azure AD, Office 365, Windows Server, Exchange, SQL Server, network-attached storage, SharePoint, and OneDrive for Business. Change Auditor detects indicators of compromise and suspicious activity while monitoring lateral movement and post-breach actions across systems such as file servers, Exchange, and Office 365. Threat prevention capabilities can block attackers from modifying critical groups, Group Policy settings and links, sensitive mailboxes, or extracting the Active Directory database to obtain credentials. The platform also identifies common Kerberos authentication vulnerabilities associated with Golden Ticket and Pass-the-Ticket attacks. Normalized audit records convert system activity into readable who, what, when, where, and workstation information together with before-and-after values. Threat timelines and related-event searches help investigators understand how individual changes connect with other security activity across the Microsoft environment. Change Auditor can integrate detailed activity logs with SIEM platforms such as Microsoft Sentinel, Splunk, ArcSight, and QRadar and can generate reports supporting compliance requirements including GDPR, PCI DSS, HIPAA, SOX, FISMA/NIST, and GLBA.
API Access
Has API
No
API Access
Has API
No
Integrations
Active Directory
No
IBM QRadar SIEM
No
Microsoft 365
No
Microsoft Entra ID
No
Microsoft Exchange
No
Microsoft OneDrive
No
Microsoft SharePoint
No
Quest Identity Defense
No
SQL Server
No
Skype
No
Integrations
Active Directory
Yes
IBM QRadar SIEM
Yes
Microsoft 365
Yes
Microsoft Entra ID
Yes
Microsoft Exchange
Yes
Microsoft OneDrive
Yes
Microsoft SharePoint
Yes
Quest Identity Defense
Yes
SQL Server
Yes
Skype
Yes
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
No
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Belkasoft
Website
belkasoft.com
Vendor Details
Company Name
Quest Software
Founded
1987
Country
United States
Website
www.quest.com/change-auditor/
Product Features
Incident Response
Attack Behavior Analytics
No
Automated Remediation
No
Compliance Reporting
No
Forensic Data Retention
No
Incident Alerting
No
Incident Database
No
Incident Logs
No
Incident Reporting
No
Privacy Breach Reporting
No
SIEM Data Ingestion / Correlation
No
SLA Tracking / Management
No
Security Orchestration
No
Threat Intelligence
No
Timeline Analysis
No
Workflow Automation
No
Workflow Management
No