PowerBroker Auditor for Active Directory

Real-time auditing of Active Directory changes: Now delivered as part of the Cygna Labs auditing platform (the former BeyondTrust/PowerBroker Management Suite), the product captures changes to Active Directory in real time, providing immediate visibility into modifications as they occur rather than relying on delayed log review.

Tracking of changes to AD objects, users, and groups: It audits the full range of AD entities including users, computers, groups, organizational units, GPOs, schema, and sites along with their attributes, giving comprehensive coverage of what changes across the directory.

Auditing of Group Policy changes: The product specifically tracks changes to Group Policy, surfacing modifications to GPOs that could affect security configuration and policy enforcement across the environment.

Change rollback / recovery of AD objects: Administrators can undo unwanted or unauthorized changes by rolling back objects or attribute values in a few clicks, enabling quick recovery from mistakes or malicious modifications without resorting to full backups.

Alerting on critical/suspicious AD changes: Real-time alerts notify staff of critical changes that may require immediate attention, with alerts deliverable to email, the event log, collaboration tools, and SIEM systems.