Auditing Guide

Purpose

This document provides users with a comprehensive overview of Auditing setup for OUTSCAN and HIAB user roles.

Requirements

This document assumes that the reader has basic access to the OUTSCAN/HIAB account and Portal Interface.

Introduction

The Auditing module allows for viewing user activity information such as login and log out, targets created, scans initiated and more of all the users that you are allowed to administer in the system.

Log In

Auditing 

To access the Auditing module, go to Main Menu > Auditing.

The Auditing window displays a detailed user activity information such as login and log out, targets created, scans initiated and many more. You are only allowed to see changes made by yourself and users that you administrate.

Auditing Fields

The Auditing window consists of nine columns, but not all are visible. To add the extra columns, click on the arrow beside any column name and select the required columns.

Data Type

The Data Type column can vary depending on the type of entry that is being changed.

The most effective way to search Audit logs is by setting filters. The images below show the available filter options in OUTSCAN and HIAB.

Selecting different options displays all entries related to changes made to these options.

OUTSCAN	HIAB

Action

The Action column shows the type of action performed. This column is used to filter the specific user action during auditing.

Example:
If you are trying to check who deleted targets, setting the filter in the action column to delete displays all the deletion actions performed. Results can further be narrowed using filtering on multiple columns.
Filter settings can be set on the column Action with the options mentioned below.

Other Columns

Name

The Name column indicates the name of the corresponding entry in Data Type column. It can be filtered by three text fields. It is possible to use all three at once to limit the results, can also use quotes to match an entire phrase.

First Name

The First Name of the user who made the changes. It can be filtered by three text fields. It is possible to use all three at once to limit the results, but you can also use quotes to match an entire phrase.

Last Name

The Last Name of the user who made the changes. It can be filtered by three text fields. It is possible to use all three at once to limit the results, but you can also use quotes to match an entire phrase.

Date

The Date column indicates the date and time of the performed action. It can be filtered by three types.

Data

The Data column displays the additional information about the data type entrys action. It can be filtered by three text fields. It is possible to use all three at once to limit the results, but you can also use quotes to match an entire phrase.

Example: 

In the above figure, Action column displays Update and Data column displays the additional details regarding the change that occurred on the selected object.

Audit Settings

By clicking the Settings icon in the top right corner of the window, the Audit settings can be changed. This helps the user to define the actions, which will require an audit comment.

The following options enforces an Audit Comment to be supplied by the user:

• Target Management - when adding, removing, or changing targets .

• Schedule Management - when adding, removing, or changing scan schedules.

• Scan Policy Management - when adding, removing, or changing a scan policy. 

• Risk Acceptance - when accepting a risk in the reporting section. 

• Changing Risk Level - when changing a risk level in the reporting section.

The comment can later be read in the audit log. 

Export Audit Log

You can export the audit log to Excel format by clicking the Export audit log button on the left bottom of the window.

Related Articles