nifty AD tool

soooo, i just heard about this new app made by the folks over at varonis...

basically, it crawls through your AD users and share perms, and can produce audit reports (for sox and the like) that say "this user has read access to these file/dirs, and full control on these files/dirs". it'll help you find open shares and all of that.

i can think of one company off the top of my head that could really use this app ;)

anywho, the nifty bit about it is that once you have it running (and you presumably have cleaned up your perms and all of that), then it begins to watch the patterns of file usage, and can generate reports on files which people have perms to but never access. and better than that, it can recognize changes in file access patterns. so in theory this will let you see a disgruntled employee attempted to do malicious things to data they have access to, or will let you see an employee copying data in preparation of leaving the company, etc....

unfortunately, they are a newer company and they might be a little too proud of their stuff... donno the details on pricing, but the rumor i heard was if you have a few hundred users, you might be pushing six figures.... ick...