how to log access to important files

how to log access to important files
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
how to log access to important files bob.elliott 06-14-2006
Posted by on June 14, 2006, 9:27 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I'm running Windows 2000, due to security reasons I need to log some
file operations. Say, I need to know all file operation (open, modify,
delete) for folder D:\Docs. Is there any way to do so?


Posted by Sebastian Gottschalk on June 14, 2006, 10:42 am
If you were  Registered and logged in, you could reply and use other advanced thread options
bob.elliott@aks-labs.com wrote:
> I'm running Windows 2000, due to security reasons I need to log some
> file operations. Say, I need to know all file operation (open, modify,
> delete) for folder D:\Docs. Is there any way to do so?

Windows 2000 supports Auditing which can be defined on almost any
object, but this would fill up your Security Event Log and therefore
should be limited to important objects only.

So you may take a look at Filemon from Sysinternals. It has an option to
link in at boot process and then keeps on silently logging everything
until the GUI the next time.

Posted by Sebastian Gottschalk on June 14, 2006, 10:45 am
If you were  Registered and logged in, you could reply and use other advanced thread options
bob.elliott@aks-labs.com wrote:
> I'm running Windows 2000, due to security reasons I need to log
> some file operations. Say, I need to know all file operation (open,
> modify, delete) for folder D:\Docs. Is there any way to do so?

Windows 2000 supports Auditing which can be defined on almost any
object, but this would fill up your Security Event Log and therefore
should be limited to important objects only.

So you may take a look at Filemon from Sysinternals. It has an option to
link in at boot process and then keeps on silently logging everything
until you start the program again.

Similar ThreadsPosted
Can I use a USB Thumb Drive to act as a key to allow access to files on a Desktop PC? June 5, 2006, 9:55 am
HPSBMA02175 SSRT061174 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Read Access to Files January 11, 2007, 3:06 pm
Do P2P programs need access as server? April 18, 2005, 7:15 pm
Way to block Internet access November 9, 2005, 4:03 pm
access to server application January 10, 2006, 11:21 am
SSRT3522 rev.1 Tomcat 3.3.1 unauthorized access July 5, 2004, 3:33 pm
Any "etrust access control"-user out there ? August 23, 2004, 11:11 pm
how to figure out location of email access? February 26, 2005, 3:21 pm
unable to access internet after upgrading IE March 13, 2005, 2:30 pm
Do I block access from svchost to DHCP? June 14, 2005, 6:32 pm

The site map in XML format XML site map

Contact Us | Privacy Policy