Centrify DirectAudit

Comply with regulatory requirements, perform in-depth troubleshooting, and protect against insider threats through detailed auditing, logging and real-time monitoring of UNIX/Linux user activity.
Centrify DirectAudit helps you comply with regulatory requirements, perform in-depth troubleshooting, and protect against insider threats for your UNIX and Linux systems. DirectAudit's detailed logging strengthens your compliance reporting and helps you spot suspicious activity by showing which users accessed what systems, what commands they executed, and what changes they made to key files and data. With DirectAudit you can also perform immediate, in-depth troubleshooting by replaying and reporting on user activity that may have contributed to system failures. And its real-time monitoring of current user sessions enables you to spot suspicious activity.

Features

• Detailed, nonintrusive recording of user sessions on UNIX and Linux systems
• Secure, reliable data collection in a scaleable SQL repository
• Visual replay of user sessions through an easy-to-use console
• Comprehensive, easy-to-use query, search and reporting capabilities
• Real-time monitoring with an at-a-glance view of all current user activity

Benefits

• Enhance compliance with regulatory requirements
• Perform in-depth troubleshooting and configuration reporting
• Protect against insider threats and monitor real-time user activity

Business Case

Practically every industry and government compliance regulation (including SOX, PCI, HIPAA, FISMA, and GLBA) requires comprehensive logging and audit trails of user activity, especially on business-critical and sensitive systems. DirectAudit meets these needs by capturing detailed user session information - who logged into what systems, what commands they executed, what changes they made to key files and data. DirectAudit's flexible querying and reporting features enhance your ability to document compliance and provide robust tools for identifying and investigating potential security breaches.

From DirectAudit's central console you can quickly locate and replay user activity that may have contributed to a system outage. DirectAudit captures detailed session activity - both keystrokes and session output – so you can diagnose immediate problems or report on and document configuration and other changes.DirectAudit lets you centrally view who is currently accessing all of your distributed UNIX and Linux systems and immediately drill down to see what they are doing. This real-time monitoring helps you proactively spot insider threats and gives you global visibility into activity across your organization.