Re: Can you monitor copying of files from local or mapped drives?

["Manuel Fernandes" <manuelf () hotmail com>]

Try robocopy.exe --- it's part of the NT Reskit and great!




Manuel Fernandes, CISSP/MCP
Information Systems/Security Consultant
Bellevue, WA





----Original Message Follows----
From: "David Sherman" <dsherman () newfrontierbank com>
To: <security-basics () securityfocus com>
Subject: Can you monitor copying of files from local or mapped drives?
Date: Mon, 28 Jul 2003 10:30:39 -0600
MIME-Version: 1.0
Received: from outgoing3.securityfocus.com ([205.206.231.27]) by 
mc5-f13.law1.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Mon, 28 Jul 
2003 17:12:24 -0700
Received: from lists.securityfocus.com (lists.securityfocus.com 
[205.206.231.19])by outgoing3.securityfocus.com (Postfix) with QMQPid 
CBD1EA30BB; Mon, 28 Jul 2003 17:50:12 -0600 (MDT)
Received: (qmail 26454 invoked from network); 28 Jul 2003 16:33:59 -0000
X-Message-Info: JGTYoYF78jEHjJx36Oi8+Q1OJDRSDidP
Mailing-List: contact security-basics-help () securityfocus com; run by ezmlm
Precedence: bulk
List-Id: <security-basics.list-id.securityfocus.com>
List-Post: <mailto:security-basics () securityfocus com>
List-Help: <mailto:security-basics-help () securityfocus com>
List-Unsubscribe: <mailto:security-basics-unsubscribe () securityfocus com>
List-Subscribe: <mailto:security-basics-subscribe () securityfocus com>
Delivered-To: mailing list security-basics () securityfocus com
Delivered-To: moderator for security-basics () securityfocus com
content-class: urn:content-classes:message
X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0
Message-ID: 
<034D02CCD6D54442A06D2DD1AF065ABE4A0DDC () banker newfrontierbank com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: Can you monitor copying of files from local or mapped drives?
Thread-Index: AcNVJZOsBqj5UnJcTg2dTSG7dmJOpw==
Return-Path: 
security-basics-return-21718-manuelf=hotmail.com () securityfocus com
X-OriginalArrivalTime: 29 Jul 2003 00:12:24.0801 (UTC) 
FILETIME=[16709D10:01C35566]

Hello All,

I am looking for a way to monitor copying that is done from the network of 
local drives. initially I just wanted to see what was copied to floppy disk 
but at this point i'd like to be able to look at email attachments too. Does 
anyone know if Microsoft has anything built in that will do this, or is 
there a 3rd party product?

Thanks,

David

---------------------------------------------------------------------------
----------------------------------------------------------------------------

_________________________________________________________________
The new MSN 8: advanced junk mail protection and 2 months FREE*  
http://join.msn.com/?page=features/junkmail


---------------------------------------------------------------------------
----------------------------------------------------------------------------