Domain controller
4sources cover it
3themes fed
3signals shown
Livestatus
Directory service health, security auditing and time sync on domain controllers.
Signals below are scored for Domain controller today.
How the agent recognizes this workload
- The agent reports the domain controller host role for this machine.
- The directory service, Netlogon and Windows Time services are present on the host.
What covers it
| Source | What it is | Status |
|---|---|---|
| Windows Security event log | The Security channel: sign-in outcomes, privilege use, directory changes and audit policy changes. | Live |
| Windows System event log | The System channel: service, driver, disk, network, cluster and hardware faults from the operating system itself. | Live |
| Windows services | Service configuration and run state, including automatic services that are not running. | Planned |
| System information | Machine identity and posture, including whether a reboot is pending. | Live |
Signals tagged to it
| Signal | Where it comes from |
|---|---|
directory object access denied (directory_object_access_denied) | Windows Security event log |
directory object changed (directory_object_changed) | Windows Security event log |
directory replication access requested (directory_replication_access_requested) | Windows Security event log |