Active Directory

This product is not supported for your selected Datadog site. ().

Overview

The Active Directory pack

This pack processes Active Directory Domain Services events, including Kerberos authentication, directory-service changes, and DCSync replication abuse.

What this pack does:

  • Parses Kerberos events
  • Flags DCSync replication
  • Drops routine renewals