Quest Change Auditor

Quest Change Auditor

Quest Software
+
+
Visit Website

About

Quest Change Auditor is a security monitoring and IT auditing platform for tracking user, administrator, configuration, and authentication activity across hybrid Microsoft environments. It provides real-time auditing and threat monitoring across Active Directory, Azure AD, Office 365, Windows Server, Exchange, SQL Server, network-attached storage, SharePoint, and OneDrive for Business. The platform detects indicators of compromise, suspicious user activity, lateral movement, and authentication-related threats that may indicate ransomware or other attacks. Change Auditor can block unauthorized changes to critical groups, Group Policy settings, sensitive mailboxes, and the Active Directory database, even when attackers have obtained privileged credentials. Its auditing engine translates system activity into normalized records showing who made a change, what changed, when and where it occurred, the originating workstation, and before-and-after values.

About

ThreatLocker is a Zero Trust Platform that prevents cyber threats by blocking unknown applications, enforcing least privilege, and controlling what can run across your environment. Using Allowlisting, Ringfencing, Network Control, and more, ThreatLocker stops ransomware, zero-day attacks, and unauthorized activity before execution, rather than relying on detection after the fact. Built for modern IT and cybersecurity teams, the platform delivers centralized visibility and policy management across endpoints, users, and applications. ThreatLocker reduces attack surface, limits lateral movement, and supports compliance with detailed audit logs. With fast deployment, a large built-in application library, and streamlined approvals, organizations can strengthen security while minimizing operational overhead and maintaining business continuity.

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

IT security teams, Active Directory administrators, Microsoft 365 administrators, SOC teams, compliance professionals, security auditors, and enterprises that need real-time auditing, threat monitoring, forensic investigation, and change tracking across hybrid Microsoft infrastructure

Audience

IT pros looking for a Zero Trust Platform

Support

Phone Support Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Supported
24/7 Live Support Supported
Online Supported

API

Offers API Not Supported

API

Offers API Supported

Screenshots and Videos

Screenshots and Videos

Pricing

No information available.
Free Version Not Supported
Free Trial Supported

Pricing

Pricing by endpoint
Free Version Not Supported
Free Trial Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 4.9 / 5
ease 4.4 / 5
features 5.0 / 5
design 4.6 / 5
support 5.0 / 5

Pros from Real Users

Pros

  • Great for the protection it offers and provides great visibility and insight into what is permitted in our environment. Highly recommend for protecting your environment with multiple tools at your disposal.
  • - Ease of use - Great support. Never waiting more than a few minutes for live support - Great feature - Active development. Regular feature updates - Much better alternative to App Locker
  • ThreatLocker takes an effective zero trust approach to application and network access. Onboarding customers is very straight-forward thanks to learning mode, and approving items that were incorrectly denied access is very straight-forward. The Cyber Hero support team are very attentive in getting any issues resolved quickly.
  • Vendor Support is the best in the business! Features that it provides are incredibly easy to use and effective. Application Control is something all Cyber Security teams need to have in their Security Stacks and Provides so much control over what applications are allow into your environment Their EDR is incredibly Lightweight in comparison to some of its competitors.
  • We love the support team at ThreatLocker. They are concise and geared with answers to every question imaginable.
  • ThreatLocker is a very reliable product that our company has been using for quite some time. It has successfully caught numerous threats and prevented us from falling victim to various cyber attacks.
  • ThreatLocker impresses with its intuitive interface, catering well to both agents and end users alike. Deploying the solution across our environment was straightforward, ensuring security for our endpoints and servers. The product excels in providing robust security features and comprehensive control, making it a standout choice for implementing a zero-trust model. Support and account management are exemplary, consistently exceeding industry standards.
  • ThreatLocker is a beautiful product, the greatest ever seen. I am in awe of what they have managed to do with their product.
  • Does an extremely good job of preventing problematic applications from either taking over or accessing information they shouldn't. Ringfencing prevents applications that have no need for lateral movement from doing so. Adopting a zero-trust methodology fixes a major security flaw in that it prevents problems before they start, for the minor inconvenience of getting unknown things approved first. Automated privilege escalation is one of the best features; if a user is installing an app that requires admin privileges, you can approve automatic escalation for a period of time for that installer and no credentials are needed to be passed to the user.
  • The ease of use on implementation, and troubleshooting. Have more control over the environment without requiring a Team dedicated to reviewing logs and taking action.

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Supported
Live Online Supported
In Person Supported

Company Information

Quest Software
Founded: 1987
United States
www.quest.com/change-auditor/

Company Information

ThreatLocker
Founded: 2017
United States
www.threatlocker.com

Alternatives

Alternatives

CrowdStrike Falcon

CrowdStrike Falcon

CrowdStrike
Cygna Auditor

Cygna Auditor

Cygna Labs
CPTRAX for Windows

CPTRAX for Windows

Visual Click Software

Categories

Digital Forensics Supported

Categories

Cybersecurity Features

AI / Machine Learning Supported
Behavioral Analytics Not Supported
Endpoint Management Supported
Incident Management Not Supported
IOC Verification Not Supported
Tokenization Not Supported
Vulnerability Scanning Supported
Whitelisting / Blacklisting Supported

Data Loss Prevention Features

Compliance Reporting Supported
Incident Management Not Supported
Policy Management Supported
Sensitive Data Identification Not Supported
Web Threat Management Supported
Whitelisting / Blacklisting Supported

Endpoint Protection Features

Activity Log Supported
Antivirus Not Supported
Application Security Supported
Behavioral Analytics Supported
Device Management Supported
Encryption Not Supported
Signature Matching Supported
Web Threat Management Supported
Whitelisting / Blacklisting Supported

Firewall Features

Alerts / Notifications Supported
Application Visibility / Control Supported
Automated Testing Supported
Intrusion Prevention Supported
LDAP Integration Not Supported
Physical / Virtual Environment Supported
Sandbox / Threat Simulation Supported
Threat Identification Supported

IT Security Features

Anti Spam Supported
Anti Virus Not Supported
Email Attachment Protection Supported
Event Tracking Not Supported
Internet Usage Monitoring Not Supported
Intrusion Detection System Supported
IP Protection Not Supported
Spyware Removal Not Supported
Two-Factor Authentication Supported
Vulnerability Scanning Not Supported
Web Threat Management Supported
Web Traffic Reporting Not Supported

Network Access Control (NAC) Features

Authentication Not Supported
Authorization Not Supported
Automated Hotfix / Updates Not Supported
Centralized Policy Management Supported
Dashboard Supported
Device Auto-Provisioning Not Supported
Device Self-Registration Not Supported
Posture Assessment Not Supported
Quarantine / Remediation Not Supported
Secure Guest Access Not Supported

Privileged Access Management Features

Application Access Control Supported
Behavioral Analytics Not Supported
Credential Management Not Supported
Endpoint Management Supported
For MSPs Supported
Granular Access Controls Supported
Least Privilege Supported
Multifactor Authentication Not Supported
Password Management Not Supported
Policy Management Supported
Remote Access Management Not Supported
Threat Intelligence Not Supported
User Activity Monitoring Supported

Integrations

Splunk Cloud Platform Supported
Active Directory Supported
ConnectWise ScreenConnect Not Supported
Datto SaaS Protection Not Supported
HaloPSA Not Supported
IBM QRadar SIEM Supported
Kaseya BMS Not Supported
Microsoft Exchange Supported
Microsoft OneDrive Supported
Microsoft SharePoint Supported
MyGlue Not Supported
Network Glue Not Supported
Okta Not Supported
Quest Identity Defense Supported
SQL Server Supported
SSOJet Not Supported
ServiceNow Not Supported
Skype Supported
Splunk Enterprise Not Supported
ThreatAware Not Supported

Integrations

Splunk Cloud Platform Supported
Active Directory Not Supported
ConnectWise ScreenConnect Supported
Datto SaaS Protection Supported
HaloPSA Supported
IBM QRadar SIEM Not Supported
Kaseya BMS Supported
Microsoft Exchange Not Supported
Microsoft OneDrive Not Supported
Microsoft SharePoint Not Supported
MyGlue Supported
Network Glue Supported
Okta Supported
Quest Identity Defense Not Supported
SQL Server Not Supported
SSOJet Supported
ServiceNow Supported
Skype Not Supported
Splunk Enterprise Supported
ThreatAware Supported
Claim Quest Change Auditor and update features and information
Claim Quest Change Auditor and update features and information