Tools −> Audit Explorer
Audit Explorer
Audit Explorer analyzes Mac OS X's BSM audit trail.
Audit Explorer analyzes the Macintosh BSM audit trails, highlights notable
events, lets you drill down to the actions of individual processes, and lets you
explore the relationships between processes.
Apple's BSM auditing system is one of the best in the world, and when
configured correctly, it can be one of the most powerful security features
at your disposal. BSM can provide far more useful information than
firewalls, network monitors, antivirus software, and disk forensics tools.
Audit Explorer lets you explore this data, helping you find out what
happened on your system, assisting you in determining if your system was
penetrated, and if so, how. If a user or malware tries to exfiltrate data
from your computer, Audit Explorer can help you identify what documents
were taken and how they were taken from your system.
Is Audit Explorer right for you? Check out the video tutorials in the
Videos section to see if this tool is a good fit for
your needs or interests. If you need some additional features to meet your
or your organization's needs, visit our Support
section and send us some feedback.
If you have a question:
contact us