what’s new in netwrix auditor 9what’s new in netwrix auditor 9.5 risk assessment behavior...

26
What’s New in Netwrix Auditor 9.5 Presenter: Jeff Melnick Systems Engineer [email protected]

Upload: others

Post on 11-Jun-2020

10 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

What’s New in Netwrix Auditor 9.5

Presenter:

Jeff Melnick

Systems Engineer

[email protected]

Page 2: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

Type your

question

here

Click

“Send”

Housekeeping

• All attendees are on mute

• Ask your questions!

• Questions will be answered during the session or at the Q&A at the end

• You will receive a copy of slides and webinar recording in the follow-up email

• Duration: Up to 60 minutes

• We hope you enjoy!

Page 3: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

WHAT’S NEW IN NETWRIX AUDITOR 9.5

Risk

Assessment

Behavior Anomaly

Discovery

Permission

Analysis

API-Enabled

Integrations

Page 4: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

IT Risk Assessment_______________________________________

Identify and prioritize risks to make

smarter IT security decisions and

close security holes

Page 5: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

IT Risk Assessment. What’s That?

• A set of interactive dashboards

• Actionable intelligence to identify and close security gaps

• Based on State-in-Time data

Page 6: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

IT Risk Assessment

Page 7: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

File names

containing

sensitive data

No file names that suggest sensitive

data is inside

One file with a name suggesting that

sensitive data is inside

Multiple files with names

suggesting that sensitive data

is inside

Potentially

harmful files

on file shares

No executables on file shares One executable on file sharesSeveral executables on file

shares

User accounts

with administrative

privileges

A small proportion of users have

administrative privileges

A significant proportion of users

have administrative privileges

A large proportion of users

have administrative privileges

ACCEPTABLE PAY ATTENTION TAKE ACTION

IT Risk Assessment. Risk Levels

Page 8: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

IT Risk Assessment. Use Cases

Compliance checksPeriodic Assessments

!

Initial Clean Up

Page 9: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

Behavior Anomaly Discovery_______________________________________

Analyze all abnormal activity of a user

in one place to improve detection of rogue

insiders and compromised accounts

Page 10: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

Behavior Anomaly Discovery. How Does It Work?

Alert triggered

Alert sent to

admin by email

User account

disabled

Harmful

executable createdAlert is included in

Behavior Anomaly

Discovery60

Assigned

risk score: 60

Page 11: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

Behavior Anomaly Discovery

Page 12: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

Behavior Anomaly Discovery. Workflow

Identify

threat actors

Investigate

anomalies

Adjust risk

scores

• Continuous process

• Especially valuable for bigger enterprises

with dedicated IT security specialists

Page 13: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

Permission Analysis_______________________________________

Review access rights and revoke

the excessive permissions to mitigate

the risk of privilege abuse

Page 14: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

Permission Analysis in AD

Page 15: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

Permission Analysis in AD. Use Cases

Verifying That Only Admins

Can Modify AD Objects

Investigating Permissions

of High-Risk Accounts

Regular Privilege

Attestations

✓!

Page 16: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

Permission Analysis in Windows Server

Page 17: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

API-Enabled Integrations_______________________________________

Automate incident management

workflows and maximize visibility

into your Linux environment

Page 18: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

New API-Enabled Integrations

Spot, investigate and block

threats to your Linux systems

with a single-pane view of

what’s happening there.

Add-on for

Generic Linux

Syslog___________________

Promptly identify and respond

to improper behavior in your

*nix-like systems by gaining full

control over privilege activity.

Add-on for

Privileged User Monitoring

on Linux and Unix Systems______________________________________

Provide initial incident

support and enable faster

and more accurate incident

investigation.

Add-on for

ServiceNow Incident

Management

Page 19: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

Other Major Improvements

Page 20: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

• Reporting on Windows Server software and computer inventory

• Improved data collection in Netwrix Auditor for Windows Server

• Enhancements to custom reports

• New predefined alerts and alert tagging

• Health log is now available in UI

• Add-on for Cisco now supports all Cisco networking devices

Major Improvements

Page 21: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

Demonstration

Netwrix Auditor

Page 22: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

Netwrix Auditor Applications

Netwrix Auditor for

Active Directory

Netwrix Auditor for

Windows File Servers

Netwrix Auditor for

Oracle Database

Netwrix Auditor for

Azure AD

Netwrix Auditor for

EMC

Netwrix Auditor for

SQL Server

Netwrix Auditor for

Exchange

Netwrix Auditor for

NetApp

Netwrix Auditor for

Windows Server

Netwrix Auditor for

Office 365

Netwrix Auditor for

SharePoint

Netwrix Auditor for

VMware

Page 23: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

GA

Financial

Healthcare & Pharmaceutical

Federal, State, Local, Government

Industrial/Technology/Other

Netwrix Customers

Page 24: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

All awards: www.netwrix.com/awards

Industry Awards and Recognition

Page 25: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

Next Steps

Free Trial: setup in your own test environment:

On-premises: netwrix.com/freetrial

Virtual: netwrix.com/go/appliance

Cloud: netwrix.com/go/cloud

Test Drive: run a virtual POС in a Netwrix-hosted test lab netwrix.com/testdrive

Webinars: join our upcoming webinars and watch the recorded sessions netwrix.com/webinars

And Microsoft Surface goes to…

The winner will be announced during the webinar or a few

days after the webinar.

Page 26: What’s New in Netwrix Auditor 9WHAT’S NEW IN NETWRIX AUDITOR 9.5 Risk Assessment Behavior Anomaly Discovery Permission Analysis API-Enabled Integrations. IT Risk Assessment _____

Thank you

Presenter:

Jeff Melnick

Systems Engineer

[email protected]

Thank You!