Joep Piscaer of Virtual Lifestyle comments:

And this is where Netwrix comes in: as an additional layer of the proverbial onion, providing protection for the on-prem part of an organization. Going on what I saw in the presentation, Auditor helps you do ad-hoc searches of the audit logs, correlating and coalescing data to remove clutter (see Mark May’s explanation on how a single action can trigger dozens of events and numerous pages of associated audit data) and floating up the relevant information as needed.

This is a great way of looking at the capabilities of Netwrix. Joep is already extending it with new ideas!

Read more at: Fighting ransomware with… Netwrix Auditor?