Security Basics mailing list archives
RE: Capturing a programs file output.
From: "TheMadScientist" <info-machine () magi net au>
Date: Tue, 17 Aug 2004 15:33:24 +1000
FileMon [1] is good for monitoring File I/O operations within Windows (and Linux I believe?), can set the filter to monitor a specific process opening and closing files, etc. As for offset the write occurred at, could probably modify to see what values are passed to the calls that the VxD monitors. Not too sure. [1] www.sysinternals.com/ntw2k/source/filemon.shtml -- TheMadScientist -----Original Message----- From: mop [mailto:mop () arach net au] Sent: Sunday, August 15, 2004 4:27 PM To: security-basics Subject: Capturing a programs file output. Hi Can anyone suggest a freeware tool for Windows that can log: a) The file access of a selected application, such as opening,/closing of files, what is written, and if possible the offset the write occured at. b) Access to a selected file by any application. Either capability would be useful, but preferably both. Timestamping would also be helpful. Thanks. Kim Morfitt --------------------------------------------------------------------------- Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off any course! All of our class sizes are guaranteed to be 10 students or less to facilitate one-on-one interaction with one of our expert instructors. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. Visit us at: http://www.infosecinstitute.com/courses/ethical_hacking_training.html ---------------------------------------------------------------------------- --------------------------------------------------------------------------- Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off any course! All of our class sizes are guaranteed to be 10 students or less to facilitate one-on-one interaction with one of our expert instructors. Attend a course taught by an expert instructor with years of in-the-field pen testing experience in our state of the art hacking lab. Master the skills of an Ethical Hacker to better assess the security of your organization. Visit us at: http://www.infosecinstitute.com/courses/ethical_hacking_training.html ----------------------------------------------------------------------------
Current thread:
- Capturing a programs file output. mop (Aug 16)
- Re: Capturing a programs file output. Niek (Aug 17)
- Re: Capturing a programs file output. Ansgar -59cobalt- Wiechers (Aug 17)
- Re: Capturing a programs file output. Tomasz Onyszko (Aug 17)
- Re: Capturing a programs file output. Barrie Dempster (Aug 18)
- RE: Capturing a programs file output. TheMadScientist (Aug 19)
- Re: Capturing a programs file output. rohithj (Aug 20)
- <Possible follow-ups>
- Re: Capturing a programs file output. H Carvey (Aug 17)
- RE: Capturing a programs file output. CHRIS GRABENSTEIN (Aug 17)
- Re: Capturing a programs file output. Nelson Santos (Aug 18)