Windows Auditing
Windows auditing is a mechanism for tracking events and discovering when and where events occurred and who was responsible for them. The use of Windows auditing can enable you to enrich your network forensics and even detect potential access problems within your environment.
Honeycomb’s Console, Collect and searching component gives a clear visibility across an organisation’s Windows event logs.
First of all, Honeycomb Collect will give you the following collection options:
- Monitor agentlessly the Windows event logs and store them in the Console
- Conduct agent based monitoring of the Windows event log with and store them in the Console
Secondly, the Windows events that have been stored in the Console can then be searched and the Windows Events dashboard will give a focussed view from which to trawl the events.
Finally, by using the Reporter, an organisation can automate the delivery of key reports to key personnel.
Pre-built reports include PCI, Operations, Gov Code of connection which will escalate details such as account deletions, failed logins, successful logins, file access by user and more.

Download Honeycomb for FREE today!
Download any of our whitepapers and datasheets here
Join us on the first Tuesday of every month for a live introduction to the Honeycomb product portfolio

About Honeycomb Technologies