DataSecurity Plus的集中式文件审计功能为您提供每个文件访问的清晰可见性,并且
用户在您的文件服务器环境中进行的修改。
使用一站式操作仪表板快速概述最近的文件和文件夹访问类型。使用自定义过滤器来分析和调查访问趋势的任何突然变化。
选择性地过滤和监控高风险访问类型,例如文件扩展名更改、重命名、删除、权限更改和非工作时间的文件活动。
1.Get the big picture: Use the one-stop operational dashboard for a quick overview of recent file and folder access types. Use custom filters to analyze and investigate any sudden changes in access trends.
2.Warning signs to look out for: Selectively filter and monitor high-risk access types, such as file extension changes, renaming, deletions, permission changes, and file activities made during non-business hours.
随时了解可能意外的更改,包括文件删除、移动和权限更改。通过比较原始文件名和更改的文件名,跟踪和反向文件名的有意和无意更改。
1.Accidents will happen: Stay on top of changes that might be accidental, including file deletions, moves, and permission changes. Track and reverse file name changes—both intentional and unintentional—by comparing original and altered file names.
通过关注可疑用户或所有者更改、权限更改、文件删除或重命名事件等关键行动,有选择地生成告警。根据事件的严重性进行分析,并获得每个事件的详细报表。
1.Choose your area of focus: Generate alerts selectively by focusing on suspicious users or critical actions such as owner changes, permission changes, file deletions, or renaming events. Analyze events based on their severity and obtain detailed reports for each event.
通过检测文件重命名和修改事件的突然激增,通过恶意软件攻击(特别是勒索软件)的即时电子邮件通知加快事件检测。
通过立即关闭受感染的机器,在几秒钟内阻止勒索软件感染。执行自定义脚本以执行针对您组织需求的操作(例如断开用户会话或锁定用户帐户)。
1.Track malware in real time: Speed up your incident detection with instant email notifications for malware attacks, especially ransomware, by detecting sudden spikes in file renaming and modification events.
2.Quarantine ransomware: Stop a ransomware infection within seconds by promptly shutting down an infected machine. Execute custom scripts to perform actions tailored to your organization's needs (e.g. disconnect the user session or lock the user account).