We can use the Columns button to select more columns to be displayed. We can narrow down the search and define a Target, Actor (who performed the action), Activity and even reduce the time window to narrow down the results.īy default, we have a lot of useful information in the first screen. In the blade that opens up on the right side, we have a top row with several actions that we will explore in this article as well, several options to narrow down the results that are being listed at the bottom (by default everything that happens in the last seven days will be listed). Logged on to Azure Portal, click on the Azure Active Directory service, and then click on Audit Logs under Activity section. Analyzing your Azure Active Directory audit logs If you need more information about the activities and components being monitored, this link is a requirement. The Active Directory audit logs is a powerful resource that shows you all activity in the Azure Active Directory.
Only users who are part of the Security Admin, Security Reader, or Global Admins are able to retrieve the information we are about to explore in this article. Using Active Directory audit logs, the cloud security administrator is able to track all changes performed in the Azure Active Directory, including changes in users, applications, groups, authentication, and so forth. In today’s article, we are going to cover just a small but powerful portion - the Active Directory audit logs, where we can check all activity on any given Azure Active Directory using the Azure Portal, export to a CSV file, archive in a storage account, integrate with your SIEM (Security Information and Event Management) solution. Azure Active Directory is a huge service and it has tons of functionalities and can be configured to meet your enterprise requirements. It helps in the hybrid environment where your directory is synchronized with the cloud environment and facilitates the process to provision users and groups and keep consistency among environments. Any cloud administrator managing Azure should be acquainted with Azure Active Directory.
0 kommentar(er)
