PaulDotCom mailing list archives
Re: Folder and File audit
From: Victor Anaya <anaya.victor () yahoo com>
Date: Tue, 15 Feb 2011 18:54:24 -0500
We use Varonis DataAdvantage which keeps track of every event on our file servers without the need of windows event logs. It requires an agent on each server/computer, but it works great. It can also tell you security settings for each file or folder and tell you when there is discrepancies. It will also alert you if a user it's opening more files than the normal for that specific user. Thanks, Victor On Feb 15, 2011, at 2:33 PM, Michael Dickey <lonervamp () gmail com> wrote:
*crickets....* You can dig into Windows audit logs (RTFM, sadly) and tuning them up higher, but that's a pretty messy job to do. (And spendy, if you dump that into a SEIM. Or if you have large file servers...) You can check into players like Tripwire that do file integrity monitoring (FIM), but that's a pretty spendy way to do it. I'd echo that lots of people would like to have what you want, and it's a pretty big no-brainer request that even non-techs can ask. But solving that issue (windows+file audits+across network+tracked changes) is one of those Big Elephants sitting in the room. On Fri, Feb 11, 2011 at 8:04 PM, Gibson, Samuel <gibsons () my uwstout edu> wrote: Hello, Does anyone have any recommendations as to a windows client that can monitor users access to files and folders on both the user's machine and the domain? We would like to have a record of what was touched, when it was touched, and potententially what was changed. Thanks, Samuel Gibson _______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com _______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
_______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
Current thread:
- Folder and File audit Gibson, Samuel (Feb 11)
- Re: Folder and File audit Michael Dickey (Feb 15)
- Re: Folder and File audit Victor Anaya (Feb 15)
- Re: Folder and File audit Bob Hewitt (Feb 15)
- Re: Folder and File audit Sherwyn (Feb 15)
- Re: Folder and File audit Xander Solis (Feb 15)
- Re: Folder and File audit Gibson, Samuel (Feb 15)
- Re: Folder and File audit Sven Aluoor (Feb 17)
- Re: Folder and File audit Michael Dickey (Feb 15)