For the best web experience, please use IE11+, Chrome, Firefox, or Safari

On Demand Audit

Streamline security, compliance & change auditing for hybrid Microsoft environments

Try Online Request Pricing
On Demand Audit product overview 07:06

As you move more workloads to Office 365, your reliance on Azure AD will increase, and so will the risk and complexity in securing your hybrid environment. Unfortunately, the Office 365 and Azure AD security logs are difficult to interpret in their cryptic format, fail to provide consolidated views of on-premises and cloud activity and lack sufficient data retention. What if you could easily search and investigate any change made either on prem or in the cloud from a single, hosted dashboard?

Quest® On Demand Audit is an Azure-hosted SaaS that provides visibility and insight into all configuration, user and administrator changes made across AD, Azure AD, Exchange Online, SharePoint Online, OneDrive for Business and Teams. With it you can quickly investigate incidents with responsive search and interactive data visualization, and store audit history for up to 10 years in the On Demand tenant.

What you get

Hosted dashboard

Hosted auditing dashboard

Hosted auditing dashboard

Consolidate event data from on-prem and Office 365 workloads for a single view of activity across your hybrid environment. Track AD logon/logoff activity and Azure AD sign-ins, including both Kerberos and NTLM authentications. Detect and alert on critical configuration, user and administrator changes made in AD, Azure AD, Exchange Online, SharePoint Online, OneDrive for Business and Teams.

Hybrid auditing

Hybrid auditing

Hybrid identity auditing

Search by both on premises and cloud identities, so you can find all user activity regardless of where the activity originated.

Flexible search

Responsive, flexible search

Responsive, flexible search

Slash investigation time with fast, intuitively built searches across tenants that deliver immediate results. On Demand Audit provides flexible searches on any event or any field, including by actor, changed attributes, activity details or cloud-only objects.

Visualization

Interactive data visualizations

Interactive data visualizations

Transform hundreds and millions of on-premises and Office 365 audit events into stunning, visual dashboards that help you simplify compliance reporting and investigate incidents faster.

Alerts

Real-time email alerts with On Demand Audit 04:23

Real-time alerts on the move

Maintain constant visibility and respond from anywhere — and on any device —to vital policy changes and suspicious events, regardless whether they occur on premises or in the cloud. With On Demand Audit, you can send real-time alerts to email and mobile devices to prompt immediate action, even while you're not on site.

That’s not all!

Normalized audit view

Unlike native auditing, On Demand Audit translates raw audit logs into a meaningful, normalized format. On Demand highlights the most important event details, including before and after values, so you can make quick decisions where your security is concerned.

Long-term, unlimited storage

On Demand Audit stores audit history for up to 10 years — which is significantly longer than the native retention period — at a fixed subscription price. This enables you to keep as much audit data as you need to satisfy security and compliance policies, without increasing your own Azure storage costs.

Granular, delegated access

In just a few clicks with On Demand Audit, you can give your security and compliance teams, help desk staff, IT managers and even external auditors and partners exactly the reports they need and nothing more. On Demand Audit provides granular, delegated access to safely empower users to get the insights they need without making any configuration changes and or setting up additional infrastructure.

On-prem, cloud or hybrid? Quest has you covered!

On-prem, cloud or hybrid? Quest has you covered!

Upgrade to the On Demand Audit Hybrid Suite for Office 365, which includes On Demand Audit, Change Auditor for Active Directory and Change Auditor for Logon Activity. On Demand Audit consolidates and correlates Change Auditor’s in-depth, high-fidelity on-prem audit data together with cloud activity from Azure AD and Office 365 workloads to get a single, hosted view of all changes across your hybrid environment.

Learn More

Screenshot Tour

Screenshot Tour

    Normalized audit view

  • Get the most important event details from every on-prem and cloud change, including before and after values, so you can quickly make sense of your audit logs.

    Normalized audit view

    • Active Directory auditing

  • Integrate with Change Auditor for Active Directory easily in a few clicks to get a single, hosted view of all AD, Azure AD and Office 365 activity together.

    Active Directory auditing

    • On-premises logon activity

  • Integrate with Change Auditor for Logon Activity in a few clicks to view all AD logons/logoffs, Azure AD sign-ins and Office 365 activity together.

    On-premises logon activity

    • Azure AD auditing

  • Get real-time auditing and alerting on all configuration, user and administrator changes made across Azure AD.

    Azure AD auditing

    • Azure AD sign-ins

  • Track all successful and failed Azure AD sign-in events. Visualize and filter by user, application or location.

    Azure AD sign-ins

    • Teams auditing

  • Audit and alert on critical events such as configuration and setting changes, guest user activity and when new Teams or channels are created.

    Teams auditing

    • OneDrive for Business auditing

  • Track all OneDrive for Business file and folder activity, including when users share OneDrive files using anonymous guest links.

    OneDrive for Business auditing

    • SharePoint Online auditing

  • Get a single view of all changes and activity within SharePoint Online files and folders.

    SharePoint Online auditing

    • Exchange Online auditing

  • Get a single view of all Exchange Online mailbox activity, including email forwarding, non-owner mailbox access and more.

    Exchange Online auditing

Why Quest On Demand?

Fast, easy setup

Onboard with ease. Start auditing in minutes. No installation, no upgrades, no complex configuration — no sweat!

Secure and reliable SaaS

Quest On Demand delivers the security standards, service level and scalability that you need, backed by award-winning, global support ready to help you 24/7/365.

Rapid innovation

We keep pace with Microsoft updates so you don’t have to. Automatic updates deliver new features and security patches quickly and without any effort on your part.
ISO certifications

ISO certifications

Quest On Demand is ISO/IEC 27001:2013, ISO/IEC 27017:2015 and ISO 27018:2019 certified

Learn More

Specifications

Available in the following Microsoft Azure regions:

  • Australia
  • Canada
  • North Europe
  • United Kingdom
  • United States

The following web browsers are supported with On Demand:

  • Internet Explorer 11
  • Microsoft Edge
  • Google Chrome (latest version)
  • Mozilla Firefox (latest version)

On Demand Audit supports integration with Change Auditor version 7.0.3 or later.

Singapore Business Review named On Demand Audit a 2020 Technology Excellence Award winner

See why Singapore Business Review named On Demand Audit a 2020 Technology Excellence Award winner.

Learn More

Resources

On Demand Audit Hybrid Suite for Office 365
Datasheet
On Demand Audit Hybrid Suite for Office 365
On Demand Audit Hybrid Suite for Office 365
Search and investigate changes made on prem or in the cloud from a single, hosted dashboard.
Read Datasheet
Top 10 Security Events to Monitor in Azure Active Directory and Office 365
E-book
Top 10 Security Events to Monitor in Azure Active Directory and Office 365
Top 10 Security Events to Monitor in Azure Active Directory and Office 365
Discover how native auditing tools can help with cloud security — and how to overcome their shortcomings.
Read E-book
Five Ways to Improve Auditing of Your Hybrid Active Directory
White Paper
Five Ways to Improve Auditing of Your Hybrid Active Directory
Five Ways to Improve Auditing of Your Hybrid Active Directory
Discover just five of the ways On Demand Audit Hybrid Suite for Office 365 helps you secure your hybrid AD environment.
Read White Paper
5 Ways to Improve Hybrid Active Directory Auditing
On Demand Webcast
5 Ways to Improve Hybrid Active Directory Auditing
5 Ways to Improve Hybrid Active Directory Auditing
Watch this on-demand webcast and explore five (and maybe more) ways to improve Hybrid AD and Azure AD auditing using the latest features released in Change Auditor and On Demand Audit.
Watch Webcast
Overcoming Office 365 Security & Compliance Auditing Challenges
White Paper
Overcoming Office 365 Security & Compliance Auditing Challenges
Overcoming Office 365 Security & Compliance Auditing Challenges
Commercial use of Office 365 has skyrocketed in recent years — but most organizations admit they still lack the mature audit capabilities they need to ensure security and regulatory compliance in the Microsoft cloud. It’s easy to see why. Getting a solid understanding of what's going on
Read White Paper
Top 5 Office 365 & Azure AD Security Events to Monitor During COVID-19
Top 5 Office 365 & Azure AD Security Events to Monitor During COVID-19

01:37

Video
Top 5 Office 365 & Azure AD Security Events to Monitor During COVID-19
With the increase in Microsoft cloud usage by remote workers, it's important to know which Office 365 and Azure AD security events to monitor. Learn more.
Watch Video
Extra Vigilance: Top 3 Ways to Adapt Your Security Log Monitoring for the Surge in Working from Home
On Demand Webcast
Extra Vigilance: Top 3 Ways to Adapt Your Security Log Monitoring for the Surge in Working from Home
Extra Vigilance: Top 3 Ways to Adapt Your Security Log Monitoring for the Surge in Working from Home
With the rapid increase of employees working from home, you will need to throw out your old baseline of normal audit activity – especially on the network plane. Users are working on insecure home networks and devices, and connecting to cloud collaboration tools more frequently, which means you
Watch Webcast
Detecting Insider Threats in Office 365 and Hybrid AD
On Demand Webcast
Detecting Insider Threats in Office 365 and Hybrid AD
Detecting Insider Threats in Office 365 and Hybrid AD
Office 365, AD and Azure AD security are critical for your business continuity, especially when it comes to mitigating insider threats. Unfortunately, native auditing tools are limited in their event-tracking capabilities, and thus create a growing blind spot in security monitoring. So, how can you
Watch Webcast

Videos

On Demand Audit product overview
On Demand Audit product overview

07:06

Video
On Demand Audit product overview
See an overview for On Demand Audit from Quest.
Watch Video
How to search and alert on suspicious logon activity in AD and Office 365
How to search and alert on suspicious logon activity in AD and Office 365

06:02

Video
How to search and alert on suspicious logon activity in AD and Office 365
Discover how to search and alert on suspicious logon activity in your AD, Office and hybrid environment with the On Demand Audit Hybrid Suite.
Watch Video
Office 365 security auditing with On Demand Audit
Office 365 security auditing with On Demand Audit

05:18

Video
Office 365 security auditing with On Demand Audit
Learn about Office 365 security auditing with On Demand Audit from Quest.
Watch Video
Azure AD auditing with On Demand Audit
Azure AD auditing with On Demand Audit

05:19

Video
Azure AD auditing with On Demand Audit
Learn about Azure AD auditing with On Demand Audit from Quest.
Watch Video
Real-time email alerts with On Demand Audit
Real-time email alerts with On Demand Audit

04:23

Video
Real-time email alerts with On Demand Audit
Learn about real-time email alerts with On Demand Audit from Quest.
Watch Video
Hybrid AD auditing with Change Auditor and On Demand Audit
Hybrid AD auditing with Change Auditor and On Demand Audit

05:18

Video
Hybrid AD auditing with Change Auditor and On Demand Audit
Learn about hybrid AD auditing with Change Auditor and On Demand Audit from Quest.
Watch Video
How to integrate Change Auditor with On Demand Audit
How to integrate Change Auditor with On Demand Audit

04:58

Video
How to integrate Change Auditor with On Demand Audit
Learn how to integrate Change Auditor with On Demand Audit from Quest.
Watch Video
Detecting the use of Golden Tickets with Change Auditor for Logon Activity
Detecting the use of Golden Tickets with Change Auditor for Logon Activity

04:43

Video
Detecting the use of Golden Tickets with Change Auditor for Logon Activity
Detect and alert on common Kerberos authentication vulnerabilities used during Golden Ticket / Pass-the-ticket attacks.
Watch Video

Blogs

How to Use Microsoft Teams: Putting the Team Back in Teamwork

How to Use Microsoft Teams: Putting the Team Back in Teamwork

Microsoft Teams is all about enabling user productivity, especially when it’s used to its fullest capacity. Learn how to use Microsoft Teams here.

Tracy van der Schyff 15 May 2020
CISA Office 365 Alert and 10 Security Actions to Take Now by Sean Metcalf (from our latest TEC Talk)

CISA Office 365 Alert and 10 Security Actions to Take Now by Sean Metcalf (from our latest TEC Talk)

This blog post will outline the CISA alert, prior CISA advice for securing Office 365 and point you to a TEC Talk by Microsoft Certified Master Sean Metcalf (@PyroTek3) that addresses the 10 (and more) Azure AD and Office 365 security tasks to do now!

Jennifer LuPiba 05 May 2020
Workforce and IT Refresher Tips to Avoid COVID-19 Phishing Attempts

Workforce and IT Refresher Tips to Avoid COVID-19 Phishing Attempts

“Let no crisis go to waste.” This is the new mantra of every cyber criminal in the age of COVID-19. Around the globe, organizations are seeing an increase in phishing attempts that exploit our fear and desire for coronavirus information, ...

Jennifer LuPiba 24 Mar 2020
TEC 2020: Adventure in Atlanta

TEC 2020: Adventure in Atlanta

This year, TEC 2020 is being held at the Loews Atlanta Hotel. Here's a list of must-see attractions when you join us at The Experts Conference in Atlanta, GA.

Jennifer LuPiba 25 Feb 2020
The Many Colors of AD Security – Microsoft Red Forest, Orange Forest, Greenfield or Blue?

The Many Colors of AD Security – Microsoft Red Forest, Orange Forest, Greenfield or Blue?

Discover the different models of Active Directory (AD) security, including the Red Forest and Orange Forest models, Greenfield migrations and Blue Team.

Bryan Patton, CISSP 13 Nov 2019
Top 10 Security Events to Monitor in Azure AD and Office 365

Top 10 Security Events to Monitor in Azure AD and Office 365

Learn about 10 places in your cloud environment that log important audit events. See how native tools fall short of ensuring your auditing compliance.

Ian S. Lindsay 22 Aug 2019
View all blogs

Get started now

Streamline security and compliance auditing of your hybrid Microsoft environment
Try Online Request Pricing

Related Products

Change Auditor for Active Directory
Change Auditor for Active Directory

Ensure security, compliance and control of AD and Azure AD.
Change Auditor for Logon Activity
Change Auditor for Logon Activity

Alert and report on AD logon and logoffs and Azure AD sign-in activity
On Demand Recovery
On Demand Recovery

SaaS solution for fast, secure Azure AD and Office 365 backup and recovery.
On Demand Migration
On Demand Migration

SaaS-based Office 365 tenant-to-tenant migrations of users, groups, mailboxes, directories
On Demand License Management
On Demand License Management

Control costs and gain complete visibility into Office 365 licenses and utilization
On Demand Group Management
On Demand Group Management

Regain peace of mind and control of Azure AD and Office 365 groups

Support & Services

Product Support

Self-service tools will help you to install, configure and troubleshoot your product.

Support Offerings

Find the right level of support to accommodate the unique needs of your organization.