More than 95% of file access activity is not monitored by IT because native auditing is slow and hard to use. When you have a usable audit trail, it's astounding how much operational intelligence comes with it.
DatAdvantage uses proprietary filters on Windows, UNIX/Linux, Exchange, and SharePoint to collect audit data with no impact to the monitored servers. For example, our Windows filter consumes about 6-10 MB of RAM and between 0-1% CPU and never writes to disk on the monitored server. DatAdvantage also audits NAS systems from NetApp, EMC, HP, and others, through API integration or jointly developed filters.
Varonis DatAdvantage alerts on anomalous user behavior by looking for statistically significant deviations on each user’s normal day-to-day activity. Access deviations may signify a worm or automated process running under that user’s credentials, or the employee’s potential departure from the organization.