Active Directory

As part of the Managed Detection and Response (MDR) service, you install NXLog and Arctic Wolf® Active Directory (AD) Sensor on all domain controllers (DC) to provide Arctic Wolf with additional visibility into AD environments.

Steps

1. Configure your Arctic Wolf GPO Advanced Audit Policy.
2. Configure the Windows server to log DNS packets on each DC.
3. Install NXLog on each DC.
4. Install AD Sensor on each DC.
5. (Optional) Enable the ADFS service account.

See also

• Uninstall AD Sensor