|
The ACS Resource Kit includes a variety of utilities and docs that we use when working with customers and partners during Proof of Concept testing, planning and actual ACS deployments. These resources are provided as-is but have been very useful in the field and should work with minimal configuration.
Download ACS Resource Kit
ACS Resource Kit Contents
The ACS Resource Kit includes general resources for administrators and engineers. These resources include:
ACS Admin Quick Reference
Comprehensive listing of all ACS administrator commands, performance counters and configuration settings.
ACS Database and Disk Planning Calculator
XLS workbook that assists with pre-deployment planning of an Audit database/s online, historical and archive storage requirements plus disk sizing.
ACS Master Class Series
Review Training - Level 300 and 400 training video's for the Audit Collection Service
ACS Visio Stencils
Microsoft Office Visio Stencils for ACS roles and components.
Comprehensive guidance, samples and automations for implementing ACS Noise Filters.
ACS Noise Filter Guide
Detailed guidance on how noise filters work, what to consider filtering and how to actually implement and tune filters. Includes reference of AdtEvents, the eventschema and sample filters.
ACS Noise Filter Starters
Automated method to implement default filters vs using default ACS filter that collects all events. These filters are progressive and targeted at the type of reporting you plan to do with ACS.
My Generic Filter
Sample ACS Noise Filter that can be easily modified for general use. This filter assumes organization may have an open audit policy in AD but limited reporting requirements, thus modifications will be required.
These resources provide canned queries, scripts and guidance for analyzing the event load, testing event scenario's and general data mining of the ACS audit database.
ACS Database Utilities
Commonly requested SQL queries and scripts for ACS Administrators.
Event Load Analysis Worksheet
XLS workbook with Data Source you can link to an ACS Audit Database to query the active partition for a list of EventID Counts.
Event Creation Scripts
Over 50 scripts targeted at specific types of security activity. These can be used to validate use cases, test reports or security operations.
Windows Security Auditing Reference List
XLS workbook with detailed listing of Windows security events, policies, services and general objects commonly audited on Windows workstations and servers.
Frequently Asked Questions
 Is the ACS Resource Kit supported?
The ACS Resource Kit is a free community download provided as-is. We will provide all reasonable assistance if you run into any errors but do not officially support this solution. Currently none of the scripts have been tested on Windows 2008 Servers.
If you have any questions, comments, or need support please contact us at support@securevantage.com for assistance.
|
|
|
|