Stealthbits is very excited to share a sneak peek of some of the enhancements available with the launch of StealthDEFEND 2.2, scheduled for November 5, 2019.
The fact remains – organizations concerned about data breaches and the rising costs to remediate them, need advanced solutions to not only quickly identify, but automatically respond to an ever-increasing barrage of attacks and breaches.
Please continue reading to review technical tips and aligning video tutorials of how StealthDEFEND 2.2 can help:
Tip 1: Adding Multiple Criteria to the Investigation Builder
Inside the new “investigation builder” is an almost unnoticed option to expand and add one additional condition to a filter. By clicking the expand button it provides the option to add an additional condition.
Tip 2: Using Different Object Classes to Filter Events
By default, the drop-down only shows user, group, or computer. However, you can type in that field so you can add any desired object class to the filter list.
Tip 3: Use “Group by” When Building Custom Threats
When building a custom threat, you can have your threat “group by” the user who performed the actions. If you don’t group by the user who performed the action it is possible you will have a number of users that performed an action that triggered the threat and it could be a false positive.
Tip 4: How to Reset the Default MFA for a User
We have all been there. Despite being asked to put recovery data in a safe location sometimes we do not heed the warning. As the administrator, you can reset the built-in MFA for any user inside the system.
If you have questions, feel free to contact us at info@stealthbits.com.
Want to learn more about StealthDEFEND and the launch of version 2.2 on November 5, 2019? Email sales@stealthbits.com.
Rod Simmons is VP of Product Strategy at STEALTHbits Technologies responsible for the vision and strategy of their Active Directory Management and Security solutions. Rod has been in the technology space for over 20 years.
Prior to joining STEALTHbits, he served as Director of Product Management at BeyondTrust responsible for the Privileged Access Management products. He has also held positions leading Solution Architects and Product Managers at Quest Software and Netpro Computing Inc.
Related Posts
- PROTIP – How to Purge Data in StealthAUDIT
- PROTIP – Fulfill a DSAR with StealthAUDIT 11.0
- Best Practices – Setting up StealthAUDIT SQL Server Database
- ProTip: How to Setup User Activity & Server Logon Scan in StealthAUDIT for Oracle
- Pro Tip – StealthINTERCEPT DB Maintenance Best Practices
- PROTIP: Policy Registration & Managing StealthINTERCEPT via PowerShell and Editing StealthDEFEND Investigations & Categorizing Playbooks
- PROTIP: How to Update the “Have I Been Pwned” (HIBP) Breach Dictionary in StealthINTERCEPT Enterprise Password Enforcer and StealthAUDIT
- Protip: How to Setup User Activity & Database Logon Scans in StealthAUDIT for Oracle
- ProTip – The Power of Character Substitution Checks in StealthINTERCEPT Enterprise Password Enforcer
- Protip: How to Setup User Activity & Server Logon Scan in StealthAUDIT for SQL
Leave a Reply