General discussion

Locked

Auditing question

By cmptrwhz ·
Hi All --
Can anyone shed some insight into an auditing question.. I have a client that is requesting to know in a log of some sort, when a file gets moved, deleted, etc.. even if the file is owned by the individual (as in Windows). Is there a third-party product that will do this, or if someone can tell how to setup Windows to do this it would be appreciated.
Thanks in advance.
Mike

This conversation is currently closed to new comments.

1 total post (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by Joseph Moore In reply to Auditing question

Well, you probably could get the built-in auditing in Windows to do this, but personally I HATE reading those audit logs.
So another solution I've heard of and seen is Tripwire. Now, I've only seen Tripwire work on Linux, but it does just what you're describing. Monitors files for changes, and records this.
I believe the correct site for Tripwire is here:
http://www.tripwire.com/downloads/index.cfm

Back to Security Forum
1 total post (Page 1 of 1)  

Related Discussions

Related Forums