Re: RE: Detecting File Alteration

[krymson () gmail com]

What you are looking for would be listed under digital file integrity programs, in case you wanted something better to 
Google for. 

Tripwire is a solid program.

I've been using open source WinPooch the past couple months and have been liking it. It does more than you want, 
though, like detecting certain system calls and registry key accesses.

NTFSInfo may help as well: http://www.sysinternals.com/Utilities/NtfsInfo.html.

Otherwise, I'm not sure how to actually open up the MFT.

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------