Security Basics mailing list archives

Re: tool to log file access

From: H Carvey <keydet89 () yahoo com>
Date: 26 Feb 2005 00:15:03 -0000

In-Reply-To: <91FD9E3DC7F754489F7F83AC886B67AD0CE7DF8A () ESMADEXCH02 azertia com>

Is there any tool to log all files accesses that creates a report more =
useful than the event log?


I've done this in Perl using the defunct Win32::AdvNotify module.  

You can do this in Perl, VB/VBScript, or C# using WMI.

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com

Current thread:

RE: tool to log file access Andrew Shore (Feb 28)
- <Possible follow-ups>
- RE: tool to log file access Reece, Terry (Feb 28)
- Re: tool to log file access H Carvey (Feb 28)
- RE: tool to log file access Jeff Gercken (Feb 28)
- Re: tool to log file access H Carvey (Feb 28)
  - Any host based and application based log analysis tools around ricci (Mar 01)
    - Re: Any host based and application based log analysis tools around Daniel Cid (Mar 01)