Introducing Netwrix Auditor 9.9

DON’T LET ATTACKERS
SNEAK AROUND IN YOUR IT KINGDOM

Visibility into SharePoint Online Permissions

See who has access to what so you can proactively mitigate the risk of insider misuse and limit the damage a compromised account can do.

Insight into Exchange Online Delegation

Understand mailbox permissions and delegation to enforce the least-privilege model and reduce the risk of data breaches.

VMware Logon Auditing

Increase the resilience of your corporate data and critical applications by spotting unauthorized logon attempts in your VMware environment.

Add-on for CyberArk Privileged Access Security

Enforce individual accountability with granular visibility into which administrator is doing what in CyberArk Privileged Access Security.

VISIBILITY INTO SHAREPOINT ONLINE PERMISSIONS

Untangle SharePoint Online Permissions

See through the tangled access rights of SharePoint Online and OneDrive for Business to keep user permissions in line with job responsibilities and finally stop worrying about a data breach.

See SharePoint Online Permissions
Reporting in Action

Keep a tight grip on your critical data

Find out who has access to site collections and libraries that might contain sensitive data in a few clicks. With this insight, you can reduce data exposure by revoking any excessive permissions and thereby help ensure your company won’t be the next security breach headline.

Make privilege attestations a part of your morning coffee routine

See through tangled SharePoint Online permissions and understand exactly what data each user has access to. Use this intelligence to regularly check whether permissions across your cloud libraries are aligned with users’ responsibilities.

Maintain good data access hygiene

See exactly how permissions were granted and identify broken inheritance to create a more secure, manageable and transparent SharePoint Online environment.

Keep a tight grip on your critical data

Make privilege attestations a part of your morning coffee routine

Maintain good data access hygiene

See exactly how permissions were granted and identify broken inheritance to create a more secure, manageable and transparent SharePoint Online environment.

INSIGHT INTO EXCHANGE ONLINE DELEGATION

Crack the Code of Exchange Online Delegation

Get a clear picture of who has access to what in your Exchange Online environment so you can take action before threat actors take control. Make the privilege attestation process a breeze so you can keep user permissions up to date and pass compliance audits with less effort.

See Exchange Online Permissions
Reporting in Action

Is your CEO’s mail safe right now?

Do your privileged users have more permissions than they need?

Is your CEO’s mail safe right now?

Wait! This is a contractor who should never have access to the CEO’s messages! Hurry up and remove this user from the list of delegates to mitigate the risk of a data breach.

The Chief Compliance Officer is an authorized delegate because she’s supposed to monitor all payment transactions made by the CEO, per company policy. You are all safe here!

Wait! This is a contractor who should never have access to the CEO’s messages! Hurry up and remove this user from the list of delegates to mitigate the risk of a data breach.

Michelle is the CEO’ assistant, so she manages the CEO’s messages as part of her job. Full Access permissions are fine here.

Hmm. Fred is an HR specialist and his responsibilities do not include monitoring all messages coming into the CEO’s mailbox. Get rid of Fred’s delegate access to make sure it won’t become a point of discussion with your auditors.

Nothing special here. As an IT administrator, Nick is supposed to have access to the internal Helpdesk mailbox.

That’s suspicious. Michael is the head of Accounting, so his mailbox contains highly sensitive information. There is absolutely no reason for Nick to have access to it. Remove him from the list of delegates to mitigate the risk of a data breach and compliance headaches.

This is a standard mailbox used by IT administrators for their testing purposes. It’s no surprise that IT admin Nick is a delegate here.

Interesting. Ann left the company 6 months ago. Per corporate policy, a mailbox should be kept for only 3 months after an employee leaves the organization. Not sure why Ann’s mailbox has not been archived and why Nick still needs to have access to it. You’d better ask him if there is a reason for it or if he simply forgot about it.

Nick was a part of the Support team when he started at this company. However, that was a while ago, so he should not have access to these messages anymore. Remove Nick from the list of delegates to ensure he can’t read mail he’s no longer authorized to see and leave auditors no reason to come back.

VMWARE LOGON AUDITING

Detect Unauthorized Logons to Your
Virtual Kingdom

Increase the resilience of your VMware environment against unauthorized access and ensure business continuity by promptly detecting failed logon attempts and validating all successful logons.

Detect unauthorized attempts to log on to your virtual environment

Get alerted to unusual activity that puts your organization at risk, such as someone trying to log into your virtual environment multiple times from one account, which could indicate a brute-force attack.

Investigate insider threats

Investigate security incidents, such as logons to your vCenter or EXSi hosts outside of business hours, which could be rogue insiders attempting to get away with misdeeds while no one’s watching.

Take the stress out of your next audit

Provide auditors with perfectly prepared reports by keeping track of both successful and failed logon attempts in your virtual IT environment and enforcing relevant access controls. and reported on.

Detect unauthorized attempts to log on to your virtual environment

Get alerted to unusual activity that puts your organization at risk, such as someone trying to log into your virtual environment multiple times from one account, which could indicate a brute-force attack.

Investigate insider threats

Investigate security incidents, such as logons to your vCenter or EXSi hosts outside of business hours, which could be rogue insiders attempting to get away with misdeeds while no one’s watching.

Take the stress out of your next audit

Provide auditors with perfectly prepared reports by keeping track of both successful and failed logon attempts in your virtual IT environment and enforcing relevant access controls. and reported on.

ADD-ON FOR CYBERARK PRIVILEGED ACCESS SECURITY

Keep the Keys to Your IT Environment Safe

Detect and investigate suspicious activity in your CyberArk Privileged Access Security environment so you can granularly track what each privileged user is doing to enforce their accountability.

Keep a close eye on privileged users

Stay confident that privileged users are following internal policies and keep them accountable for their actions by auditing each action in CyberArk Privileged Access Security, like taking a password from the production server, so you can promptly respond to unintentionally improper behavior that might lead to security incidents or downtime.

Resolve user issues before they become real problems

Find out exactly what activity has been generated by Central Policy Manager, such as password changes, so you can prevent complaints about expired passwords and business disruptions caused by the inability to access required resources.

Investigate insider attacks

While it may never happen, you can uncover rogue insiders using privileged identities by having all security intelligence at your fingertips, so you can piece together even the most complicated privileged abuse incidents.

Keep a close eye on privileged users

Stay confident that privileged users are following internal policies and keep them accountable for their actions by auditing each action in CyberArk Privileged Access Security, like taking a password from the production server, so you can promptly respond to unintentionally improper behavior that might lead to security incidents or downtime.

Resolve user issues before they become real problems

Find out exactly what activity has been generated by Central Policy Manager, such as password changes, so you can prevent complaints about expired passwords and business disruptions caused by the inability to access required resources.

Investigate insider attacks

While it may never happen, you can uncover rogue insiders using privileged identities by having all security intelligence at your fingertips, so you can piece together even the most complicated privileged abuse incidents.

Learn about additional enhancements
in Netwrix Auditor 9.9 that improve
usability, performance and stability.

See the full list of Netwrix Auditor advantages and learn how you can detect threats faster, prove compliance with less effort and enable your IT team to do more with less.

Download Datasheet (.pdf)

What’s new in netwrix auditor 9.9

Meet the new Netwrix Auditor! In this webinar, our experts will demonstrate how the new capabilities in Netwrix Auditor 9.9 can help you further strengthen the security of your Office 365 data, increase the resilience of your VMware environment and more.

Watch Now

Ready to get started?

Next Steps

Request one-to-one demo

{{ firstError }}

We care about security of your data.
Privacy Policy

Request a Quote

{{ firstError }}

We care about security of your data.
Privacy Policy

Solutions

Data Access Governance

Ransomware Protection

Privileged Access Management

Active Directory Security

Identity Threat Detection & Response

Identity Governance and Administration

Password Security

Data Governance

Data Loss Prevention

Data Security Platform

Audit and Compliance

eDiscovery

Records Management

Freeware

Top 7 Free Tools

Account Lockout Examiner

Netwrix Auditor Free Community Edition

All Free Tools

Add-on Store

Support

Renew License

Submit a Ticket

Knowledge Center

Community

Customer Portal

Supported Versions

Company

About Us

Careers

Management Team

Customers

Analyst Coverage

News

Events

Contact Us

© 2025 Netwrix Corporation

Privacy Policy EU Privacy Policy EULA Modern Slavery Statement

Corporate Headquarters: 6160 Warren Parkway,
Suite 100, Frisco, TX, US 75034

Phone: 1-949-407-5125 | Toll-free: 888-638-9749

DON’T LET ATTACKERS SNEAK AROUND IN YOUR IT KINGDOM

DON’T LET ATTACKERS
SNEAK AROUND IN YOUR IT KINGDOM