On Demand Audit
简化针对混合Microsoft环境的安全性、合规性和更改审核。当您将更多工作负载移至Microsoft云后，您对Azure AD的依赖将增加，保护混合环境所面临的风险和复杂性也将随之增加。遗憾的是，Office 365和Azure AD安全日志不提供内部部署活动和云活动的整合视图，且系统提供的工具不易于识别漏洞攻击、漏洞和可疑活动。Quest® On Demand Audit可跟踪AD、Azure AD、文件服务器、网络连接存储、Exchange Online、SharePoint Online、OneDrive for Business和Teams中所做的所有配置、用户和管理员更改。On Demand Audit主动突出显示安全漏洞和异常活动，并可通过响应式搜索和上下文交互式数据可视化加快事件调查。
On Demand Audit是由Azure托管的软件即服务(SaaS)解决方案，可用于直观查看和深入了解对AD、Azure AD、文件服务器、网络连接存储、Exchange Online、SharePoint Online、OneDrive for Business和Teams中所做的所有配置、用户和管理员更改。On Demand Audit将Change Auditor提供的内部部署威胁防御与动态漏洞评估、自动异常检测和上下文可视化相结合，以抵御代价高昂的攻击，加快安全调查。
您所获益处
安全漏洞控制板
分析内部部署和Office 365工作负载的事件数据，以提供有关整个混合环境中安全漏洞和异常活动的单一视图。对入侵指标(IOC)发出警报，其中包括Kerberos漏洞利用、脱机提取AD数据库、未经授权的域复制、对敏感组和角色的更改，以及登录失败、帐户锁定和外部访客用户活动异常迅猛增长。通过上下文可视化加快调查，以检测并阻止违规行为，避免其对网络造成严重破坏。
不止如此！
交互式数据可视化
将数百万个内部部署审核事件与Office 365审核事件转换为交互式直观控制板，帮助您简化合规性报告，更快速地调查事件。
威胁防御
与Change Auditor相集成，以阻止攻击者横向移动，方法是阻止其更改内部部署组和GPO，或阻止其过滤您的AD数据库以窃取凭据 – 无论他们已劫持何种权限。
360°安全保护
从前期漏洞评估到入侵检测和受损帐户监控，Change Auditor全程为您保驾护航。
标准化审核视图
与使用Microsoft随附工具的Office 365审核不同，On Demand Audit会将原始审核日志转换为有意义的标准化格式。On Demand会突出显示最重要的事件详细信息，包括先前的值和之后的值，以便您可以快速确定存在安全问题的区域。
长期存储
On Demand Audit以固定订阅价格将审核历史记录存储长达10年。这使您可以保存所需数量的审核数据，以满足安全性与合规性策略，而不会增加您自己的Azure存储成本。
粒度授权访问
只需通过On Demand Audit点击几下，即可向您的安全与合规团队、服务台员工、IT经理甚至外部审核员和合作伙伴准确提供他们所需的报告，再无需执行其他操作。On Demand Audit提供粒度授权访问，可以安全地使用户获得对所需内容的深入了解，而且无需进行任何配置更改，也无需设置其他基础架构。
内部部署、云或混合？Quest帮您全部解决！
要实现真正全面的Office 365审核，请升级到On Demand Audit Hybrid Suite for Office 365，其包含On Demand Audit、Change Auditor for Active Directory和Change Auditor for Logon Activity。On Demand Audit将Change Auditor的深度高保真内部部署审核数据与Azure AD和Office 365工作负载中的云活动进行整合和关联，以提供一个有关您的混合环境中所有更改的单一托管视图。
屏幕截图教程
安全漏洞控制板
分析内部部署和Office 365工作负载的事件数据，以提供有关整个混合环境中安全漏洞和异常活动的单一视图。
为什么选择Quest On Demand？
快速、轻松设置
轻松使用。只需几分钟即可开始审核。无需安装、无需升级、无需进行复杂的配置 - 毫不费力！
安全而可靠的SaaS
Quest On Demand提供您所需的安全标准、访问级别和可扩展性，并且以屡获殊荣的全球支持为后盾，他们全年全天候随时为您提供帮助。
快速创新
我们与Microsoft更新保持同步，因此您无需更新。自动更新可快速提供新功能和安全补丁，无需您执行任何操作。
ISO认证
Quest On Demand包含在Platform Management ISO/IEC 27001、27017和27018认证的范围之内。
规格
在以下Microsoft Azure区域可用：
- 澳大利亚
- 加拿大
- 北欧
- 英国
- 美国
On Demand支持以下Web浏览器：
- Internet Explorer 11
- Microsoft Edge
- Google Chrome（最新版本）
- Mozilla Firefox（最新版本）
On Demand Audit支持与Change Auditor 7.0.3或更高版本相集成。
业界认可
Singapore Business Review奖
网络安全全球卓越大奖
On Demand订购计划
T1
T3
T5
Nova
报告
委派和策略控制
On Demand Audit
Office 365和Azure AD审核
内部部署AD和登录活动审核
3年审核保留
异常检测
On Demand License Management
Office 365许可证报告
On Demand Recovery
Azure AD和Office 365用户和组
T1
T3
T5
On Demand Migration
Azure、电子邮件、OneDrive
Azure、电子邮件、OneDrive、SharePoint、Teams和O365组
Active Directory
Nova
报告
委派和策略控制
On Demand Audit
Office 365和Azure AD审核
内部部署AD和登录活动审核
3年审核保留
异常检测
On Demand License Management
Office 365许可证报告
On Demand Recovery
Azure AD和Office 365用户和组
资源
On Demand Audit Hybrid Suite for Office 365
Search and investigate changes made on prem or in the cloud from a single, hosted dashboard.
Top 10 Security Events to Monitor in Azure Active Directory and Office 365
Discover how native auditing tools can help with cloud security — and how to overcome their shortcomings.
Five Ways to Improve Auditing of Your Hybrid Active Directory
Discover just five of the ways On Demand Audit Hybrid Suite for Office 365 helps you secure your hybrid AD environment.
5 Ways to Improve Hybrid Active Directory Auditing
Watch this on-demand webcast and explore five (and maybe more) ways to improve Hybrid AD and Azure AD auditing using the latest...
Overcoming Office 365 Security & Compliance Auditing Challenges
Commercial use of Office 365 has skyrocketed in recent years — but most organizations admit they still lack the mature au...
Extra Vigilance: Top 3 Ways to Adapt Your Security Log Monitoring for the Surge in Working from ...
With the rapid increase of employees working from home, you will need to throw out your old baseline of normal audit activity &...
Detecting Insider Threats in Office 365 and Hybrid AD
Office 365, AD and Azure AD security are critical for your business continuity, especially when it comes to mitigating insider ...
Active Directory Security Assessment
Identify, quantify and prioritize attack paths so you can secure Active Directory from every angle.
视频
On Demand Audit product overview
See an overview for On Demand Audit from Quest.
How to search and alert on suspicious logon activity in AD and Office 365
Discover how to search and alert on suspicious logon activity in your AD, Office and hybrid environment with the On Demand Aud...
Office 365 security auditing with On Demand Audit
Learn about Office 365 security auditing with On Demand Audit from Quest.
Azure AD auditing with On Demand Audit
Learn about Azure AD auditing with On Demand Audit from Quest.
Real-time email alerts with On Demand Audit
Learn about real-time email alerts with On Demand Audit from Quest.
Hybrid AD auditing with Change Auditor and On Demand Audit
Learn about hybrid AD auditing with Change Auditor and On Demand Audit from Quest.
How to integrate Change Auditor with On Demand Audit
Learn how to integrate Change Auditor with On Demand Audit from Quest.
Detecting the use of Golden Tickets with Change Auditor for Logon Activity
Detect and alert on common Kerberos authentication vulnerabilities used during Golden Ticket / Pass-the-ticket attacks.
博客
The top activities to track when auditing Active Directory
Learn why auditing Active Directory is vital to security and business continuity, and what types of activity to track.
Ian Lindsay
Understanding the cyber kill chain and how it impacts Microsoft 365
The cyber kill chain is a cybersecurity model that details the stages of a cyberattack. Learn all about it and how it impacts Microsoft 365 environme...
Bryan Patton
The anatomy of Active Directory attacks
Learn the most common Active Directory attacks, how they unfold and what steps organizations can take to mitigate their risk.
Jason Morano
How Active Directory configurations can reduce the likelihood of intrusions
Learn real-world insights into how Active Directory configurations can help to harden your cybersecurity defenses and reduce unwanted intrusions.
Bryan Patton
CISA Office 365 Alert and 10 Security Actions to Take Now by Sean Metcalf (from our latest TEC Talk)
This blog post will outline the CISA alert, prior CISA advice for securing Office 365 and point you to a TEC Talk by Microsoft Certified Master Sean ...
Jennifer LuPiba
Kerberos authentication: How it works — and how to maximize its security
Kerberos authentication has been Microsoft’s default authentication method since Windows Server 2000. Learn how it works and how to maximize its secu...
Bryan Patton