Security Basics mailing list archives

Re: Audit Windows files/folders


From: TStark <stark.ironman () gmail com>
Date: Mon, 9 Apr 2007 18:27:49 -0400

Best software for that very thing is TripWire. Will watch changes in
files, anything deleted, services shut down, processes stopped,
etc..reported by e-mail, paging, etc..sounds like what you're lookin
for.

Tony

On 4/9/07, Scott Ramsdell <Scott.Ramsdell () cellnet com> wrote:
Hi,

Simply query your server's event log with a VB script after enabling
auditing.

Kind Regards,

Scott Ramsdell
CISSP, CCNA, MCSE
Security Network Engineer

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Tornado
Sent: Thursday, April 05, 2007 12:02 PM
To: security-basics () securityfocus com
Subject: Re: Audit Windows files/folders

Thank you all for your replies. I know there is Auditing feature in
Windows 2003 which will show up in event logs.
But unfortunately i missed to add this point that we are looking for
some software which will alert us via email when some folder/ file is
deleted. Both open source and commercial tools are fine.

Thanks.

Quoting Tornado <itsec_guy () bluebottle com>:

> Hi All,
>
> I am looking for some software which will allow me to audit the
> files on
> Windows 2003 server. e.g. who deleted the file/folder etc.
>
> Please let me know.Both open source and commercial tools are fine.
>
> Thanks in advance.
>
>




Current thread: