TechValidate Research on Quest Microsoft Platform Management


Quest InTrust Case Study

Large Enterprise Financial Services Company

Introduction

This case study of a large enterprise financial services company is based on a March 2018 survey of Quest InTrust customers by TechValidate, a 3rd-party research service. The profiled company asked to have their name blinded to protect their confidentiality.

“The most beneficial features of InTrust are its single data repository and powerful search engine”

Challenges

The business challenges that led the profiled company to evaluate and ultimately select Quest InTrust:

  • Limited visibility into workstation and privileged account activity
  • Collecting large volumes of event log data from different systems, devices and applications
  • A need to respond quickly to security incidents

Use Case

The key features and functionalities of Quest InTrust that the surveyed company uses:

  • Uses the following SIEM tools in their environment:
    • ArcSight
  • Is collecting data from the following systems:
    • Windows (servers and workstations)
    • Linux/Unix (HP-UX, IBM AIX, Solaris)
    • Web Servers
    • Custom/scripted data source
    • Exchange
    • AD, file servers, sharepoint
  • Uses the following systems to analyze InTrust data:
    • Quest IT Security Search
    • SQL Server Reporting Services

Results

The surveyed company achieved the following results with Quest InTrust:

  • Realized the following benefits with InTrust:
    • Collected and stored all client workstation logs in one place
    • Stored massive volumes of data in a highly-compressed repository to reduce costs
    • Increased the speed of security investigations and audits with full-text search on all native logs
    • Forwarded log data to their existing SIEM solution for security analytics
    • Integrated with Quest IT Security Search to correlate data
  • Reduced storage costs by up to 20% with InTrust’s highly-compressed repository
  • Total size of their InTrust repositories is 5 TB




About This Data

This data was sourced directly from verified users of Quest Microsoft Platform Management by TechValidate.

TechValidate verifies the identity and organizational affiliation of all participants that contribute to published research data. When research participants so desire, we also guarantee their anonymity so that they may share information honestly and freely.


More Research on Quest Microsoft Platform Management