Kensington Tech brings to all NetWitness for Logs customers our newest free solution, for the automation of exporting Windows Event Sources from Active Directory.
Q: What problem does this solution solve?
A: Organisations are constantly adding and removing new hosts from the AD domains. For many. the process of syncing NetWitness' event sources with this constantly-changing domain is a tedious, manual process. Our solution always captures the most recent 'snapshot' of computers from AD, so that you can keep NetWitness for Logs and AD in sync.
This PowerShell script runs on a Windows host, and it's CSV output can be combined with our import solution to fully automate the process of on-boarding new Windows hosts, and the removal of deleted Windows hosts.
Tim Underhay
Kensington Technology Associates
