search

utmstack / UTMStack

Customizable SIEM and XDR powered by Real-Time correlation and Threat Intelligence
https://utmstack.com
GNU Affero General Public License v3.0
198 stars 19 forks source link

[BUG] The AD Auditor module does not process logs for the current day #659

Closed mjabascal10 closed 1 month ago

mjabascal10 commented 3 months ago

The AD Auditor module does not detect user activity for the current day, but Instead processes it the following day.

To Reproduce

Steps to reproduce the behavior:

  1. Create, log in, or delete a user
  2. Go to 'User Auditor/User Audit' 3 See error

Expected behavior "Changes made to the user list should be reflected in the displayed information."

Possible solution

We recommend conducting daily searches for user activity at specific intervals to maintain an updated list of active users. This practice ensures that user information reflects recent activity within a reasonable timeframe.