Re: Folder and File audit

[Victor Anaya <anaya.victor () yahoo com>]

We use Varonis DataAdvantage which keeps track of every event on our file servers without the need of windows event 
logs. It requires an agent on each server/computer, but it works great. It can also tell you security settings for each 
file or folder and tell you when there is discrepancies. It will also alert you if a user it's opening more files than 
the normal for that specific user. 

Thanks,
Victor 

On Feb 15, 2011, at 2:33 PM, Michael Dickey <lonervamp () gmail com> wrote:

> *crickets....*
>  
> You can dig into Windows audit logs (RTFM, sadly) and tuning them up higher, but that's a pretty messy job to do. 
> (And spendy, if you dump that into a SEIM. Or if you have large file servers...)
>  
> You can check into players like Tripwire that do file integrity monitoring (FIM), but that's a pretty spendy way to 
> do it.
>  
>  
> I'd echo that lots of people would like to have what you want, and it's a pretty big no-brainer request that even 
> non-techs can ask. But solving that issue (windows+file audits+across network+tracked changes) is one of those Big 
> Elephants sitting in the room.
>  
>
>
>  
> On Fri, Feb 11, 2011 at 8:04 PM, Gibson, Samuel <gibsons () my uwstout edu> wrote:
> Hello,
>  
> Does anyone have any recommendations as to a windows client that can monitor users access to files and folders on 
> both the user's machine and the domain?  We would like to have a record of what was touched, when it was touched, and 
> potententially what was changed.
>  
> Thanks,
> Samuel Gibson
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom () mail pauldotcom com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom () mail pauldotcom com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com