MIT License
Copyright (c) 2021 Dhruva Kumar
This repository contains zabbix templates for Windows Active Directory(AD) security checks.
Zabbix mininum version 4.0.x
Download and import the template into your Zabbix server.
-
The template checks the windows active directory security checks.
-
Zabbix server obtains replication metrics:
Failure count Failure type First failure time Last replication error some metadata metrics
-
The audit template triggers the below events which occur in windows Active directory.
• Eventlog clear • Failed Login attempt • Attempt to install a service • User account creation • User account deletion • User account enabled • User account disabled • User account deleted • User account lockout • User account unlock
-
The template monitors above events which are considered as critical events.
-
The template is tested on windows servers 2008r2 2012r2 2016, windows 10.