Auditing Guide

Purpose

This document provides users with a comprehensive overview of Auditing setup for OUTSCAN and HIAB user roles.

Requirements

This document assumes that the reader has basic access to the OUTSCAN/HIAB account and Portal Interface.

Introduction

The Auditing module allows for viewing user activity information such as login and log out, targets created, scans initiated and more of all the users that you are allowed to administer in the system.

Getting Started

There are two ways of launching your applications.

• From OUTSCAN
• From a HIAB

OUTSCAN

To launch the OUTSCAN application, navigate to https://outscan.outpost24.com.

Note

Use HTTPS protocol.

Log in using your credentials.

HIAB

To connect to a HIAB, use the assigned network address.

Note

Use HTTPS protocol.

Log in using your credentials.

Auditing 

To access the Auditing module, go to Main Menu > Auditing.

The Auditing window displays a detailed user activity information such as login and log out, targets created, scans initiated and many more. You are only allowed to see changes made by yourself and users that you administrate.

Auditing Fields

The Auditing window consists of nine columns, but not all are visible. To add the extra columns, click on the arrow beside any column name and select the required columns.

Note

Only seven columns are visible by default.

Data Type

The Data Type column can vary depending on the type of entry that is being changed.

The most effective way to search Audit logs is by setting filters. The images below show the available filter options in OUTSCAN and HIAB.

Selecting different options displays all entries related to changes made to these options.

Note

Note that the options differ between the OUTSCAN and HIAB. 

OUTSCAN	HIAB

Note

Main Account and User groups are only visible to Main User or Super User.

Action

The Action column shows the type of action performed. This column is used to filter the specific user action during auditing.

Example:
If you are trying to check who deleted targets, setting the filter in the action column to delete displays all the deletion actions performed. Results can further be narrowed using filtering on multiple columns.
Filter settings can be set on the column Action with the options mentioned below.

Other Columns

Name

The Name column indicates the name of the corresponding entry in Data Type column. It can be filtered by three text fields. It is possible to use all three at once to limit the results, can also use quotes to match an entire phrase.

First Name

The First Name of the user who made the changes. It can be filtered by three text fields. It is possible to use all three at once to limit the results, but you can also use quotes to match an entire phrase.

Last Name

The Last Name of the user who made the changes. It can be filtered by three text fields. It is possible to use all three at once to limit the results, but you can also use quotes to match an entire phrase.

Note

The first name and last name of a user should be set using user account under Main Menu > Settings > Manage Users.

Date

The Date column indicates the date and time of the performed action. It can be filtered by three types.

Data

The Data column displays the additional information about the data type entrys action. It can be filtered by three text fields. It is possible to use all three at once to limit the results, but you can also use quotes to match an entire phrase.

Example: 

In the above figure, Action column displays Update and Data column displays the additional details regarding the change that occurred on the selected object.

Important Note

Consultancy User
Available on a super user account on OUTSCAN. Whenever a support technician makes changes to the settings, the name of the technician will appear in this column. This feature is not enabled by default.

Important Note

Searching by Name
It is easy to filter using the name or action field, in case you are looking for the exact user or action.

Audit Settings

Note

These options are only available for a Main User or Super User.

By clicking the Settings icon in the top right corner of the window, the Audit settings can be changed. This helps the user to define the actions, which will require an audit comment.

The following options enforces an Audit Comment to be supplied by the user:

• Target Management - when adding, removing, or changing targets .
• Schedule Management - when adding, removing, or changing scan schedules.
• Scan Policy Management - when adding, removing, or changing a scan policy. 
• Risk Acceptance - when accepting a risk in the reporting section. 
• Changing Risk Level - when changing a risk level in the reporting section.

The comment can later be read in the audit log. 

Export Audit Log

You can export the audit log to Excel format by clicking the Export audit log button on the left bottom of the window.

Related Articles

_Copyright

_{© 2024 Outpost24® All rights reserved. This document may only be redistributed unedited and unaltered. This document may be cited and referenced only if clearly crediting Outpost24® and this document as the source. Any other reproduction and redistribution in print or electronically is strictly prohibited without explicit permission.}

_Trademark

_{Outpost24® and OUTSCAN™ are trademarks of Outpost24® and its affiliated companies. All other brand names, product names or trademarks belong to their respective owners.}