Identity Security Sensor

Views:

Configure and manage the Identity Security Sensor module settings.

Important

Identity Security Sensor supports Windows deployments.
Navigating between the security modules or leaving the Policy Settings screen discards any unsaved changes. To avoid losing your work, always click Save before leaving the current screen.
Identity Security Sensor requires enabling Active Directory integration.

Identity Security Sensor serves as a centralized hub, collecting and managing all aspects of identity data to ensure robust and effective identity security. Currently, the module supports monitoring Microsoft Active Directory on-premises deployments. Support for other identity services is coming soon.

To protect your data with Identity Security Sensor, select Enable.

Note

TrendAI™ recommends only enabling Active Directory monitoring on endpoints that are domain controllers.

If you are enabling on an endpoint running Active Directory Certificate Services, some additional setup might be required to monitor and log Windows events 4886 and 4887. For more information, see Configure Certificate Authority audit filter to record Windows events 4886 and 4887.