RE: Audit Windows files/folders

["J.M. Seitz" <lists () bughunter ca>]

Another excellent one is SamHain, although it's for linux, it kicks the
pants off of Tripwire. 

JS

> -----Original Message-----
> From: listbounce () securityfocus com 
> [mailto:listbounce () securityfocus com] On Behalf Of TStark
> Sent: Monday, April 09, 2007 3:28 PM
> To: Scott Ramsdell
> Cc: Tornado; security-basics () securityfocus com
> Subject: Re: Audit Windows files/folders
>
> Best software for that very thing is TripWire. Will watch 
> changes in files, anything deleted, services shut down, 
> processes stopped, etc..reported by e-mail, paging, 
> etc..sounds like what you're lookin for.
>
> Tony
>
> On 4/9/07, Scott Ramsdell <Scott.Ramsdell () cellnet com> wrote:
> > Hi,
> >
> > Simply query your server's event log with a VB script after 
> enabling 
> > auditing.
> >
> > Kind Regards,
> >
> > Scott Ramsdell
> > CISSP, CCNA, MCSE
> > Security Network Engineer
> >
> > -----Original Message-----
> > From: listbounce () securityfocus com 
> > [mailto:listbounce () securityfocus com]
> > On Behalf Of Tornado
> > Sent: Thursday, April 05, 2007 12:02 PM
> > To: security-basics () securityfocus com
> > Subject: Re: Audit Windows files/folders
> >
> > Thank you all for your replies. I know there is Auditing feature in 
> > Windows 2003 which will show up in event logs.
> > But unfortunately i missed to add this point that we are 
> looking for 
> > some software which will alert us via email when some 
> folder/ file is 
> > deleted. Both open source and commercial tools are fine.
> >
> > Thanks.
> >
> > Quoting Tornado <itsec_guy () bluebottle com>:
> >
> > > Hi All,
> > >
> > > I am looking for some software which will allow me to audit the 
> > > files on Windows 2003 server. e.g. who deleted the 
> file/folder etc.
> > > Please let me know.Both open source and commercial tools are fine.
> > >
> > > Thanks in advance.