Requirements

Operating system

Windows Server 2012 R2 or later, Windows 8.1 or later

.NET Framework

.NET Framework 4 required

Database

• SQLite (default, included),

• Microsoft SQL Server 2008+,

• SQL Server Express 2008+,

• MySQL 5.6+,

• Microsoft Access (.mdb, evaluation only, 32-bit OS).

See Database architecture Reference

Disk space

150 MB for the FileAudit installation, plus additional space for the database.

Windows Security log size

250 MB recommended, enough to retain at least 30 minutes of audit data without overwriting

Accounts used

• LocalSystem account (must remain enabled on audited servers);

• FileAudit server computer account (read access to Active Directory Users and Computers);

• Local administrator privileges required on audited servers for remote auditing.

See Accounts Reference

Memory

2 GB RAM minimum, 4 GB or more recommended

CPU

Dual-core 2 GHz minimum

Display resolution

At least 1024 x 768

Protocols

ICMP (Ping) and SMB (TCP 445) must be allowed from the FileAudit server to all audited servers

Remote Event Log Management

Must be enabled and authorized in the Firewall Exceptions on audited servers to allow FileAudit to collect Windows Security events remotely

Remote Registry service

Must be running on audited servers to allow FileAudit to retrieve and manage required configuration information

Remote FileAudit console connection

TCP port 2000 by default. See Connect remotely to a FileAudit service Guide

Cloud auditing

TLS 1.2 required for connections to cloud providers. See Cloud audit Reference