-Correlation and Analysis
*Special “windowing” technology to view event log records from multiple sources simultaneously
*Ability to jump to specific dates, sift through logs or scroll them chronologically
*Powerful correlation and custom grouping ability help draw out insights from log data
*Advanced event filtering based on past date ranges, event ID or computer look up
*Tracking of successful and failed attempts by users to access objects and automated event correlation with related file or folder deletion activity
-Reporting and Administration
*Combined Windows EVT and EVTX log reporting using Log Refiner ™ Technology
*Easy to use custom report designer enables creation of insightful and compelling reports
*Quick access to scheduled reports and past report distribution history
*Custom domain configuration to manage multiple administrator roles and access
*Easy export of pre-built report titles and information on what they target
*Ability to test scheduled reports after creation to verify against requirements
*Ships with commonly used reports including the following condensed reports
*Logon Failures - Active Directory (kerberos)
*Logon Failures - Local Workstations and Servers
*Successful Logons - Workstations and Servers
*Specific reports on file and folder access and deletion crucial for compliance reporting.
