Audit Explorer analyzes the Macintosh BSM audit trails, highlights notable events, lets you drill down to the actions of individual processes, and lets you explore the relationships between processes.
Apple’s BSM auditing system is one of the best in the world, and when configured correctly, it can be one of the most powerful security features at your disposal. BSM can provide far more useful information than firewalls, network monitors, antivirus software, and disk forensics tools. Audit Explorer lets you explore this data, helping you find out what happened on your system, assisting you in determining if your system was penetrated, and if so, how. If a user or malware tries to exfiltrate data from your computer, Audit Explorer can help you identify what documents were taken and how they were taken from your system.
Visit our site for video tours of Audit Explorer and to help you determine if this is the right tool for your security needs.