Audit trails maintain a record of system activity. They leave a series of records of computer events about an operating system, applications and even user activities. This ensures that system resources have not been harmed by hackers, insiders, disgruntled employees, and technical problems that may arise.
Benefits of Audit Trails
They can provide security-related objectives, individual accountability, reconstruction of events, intrusion detection, and problem analysis. When granting or accessing sensitive information it’s important to know who or when it happened. Employees should be held accountable for their actions.
According to The National Institute of Standards and Technology (NIST), application-level audit trails can be helpful because it monitors:
Any form of audit is helpful to determine causes of system crashes to help prevent future outages. We can trace where the problem is and provide a recovery process. For example, detecting a performance issue can often be traced back to system performance logs such as disk file space, outgoing modem use which could indicate problems.
More importantly, Microsoft’s Active Directory can generate a wide range of security events. Options include a real-time log-based intrusion detection and analysis. Is your IT company looking into these events in across the network? There are free options such as Log Parser Lizard, OSSEC and Event Log Analyzer.
In the Systems Administrator realm there are four “A”s to account management from our partners at ESET:
A disgruntled worker can sabotage an organization—it’s critical that your IT company knows the four “A”’s of account management. Placing a value on event logs and audit trails can help solve a technical problem. Audit trails are not only critical for troubleshooting, but for preventative maintenance.
Category: Atlanta IT Service Articles, Date: 17th June 2016, Author: Chris Chao