You can extend Sentinel’s threat monitoring capability by integrating Sentinel with Change Guardian. Change Guardian gives you the security intelligence you need to rapidly identify and respond to privileged-user activities that could signal a security breach or result in compliance gaps. It helps security teams detect and respond to potential threats in real-time through intelligent alerting of authorized and unauthorized access and changes to critical files, systems, and applications.
To receive Change Guardian events, the Change Guardian administrator must configure the Change Guardian server to send events to Sentinel. For more information, see Managing Event Destinations
in the Change Guardian User Guide.
For information about viewing Change Guardian events, see Viewing Secure Configuration Manager Events and Compliance Details
in the Sentinel User Guide.
You can also view Change Guardian reports, by importing reports from Change Guardian. For more information, see Creating Reports
in the Sentinel User Guide.