RE: Utility to determine who deteled files

From: Shackleford, Dave (znz1@cdc.gov)
Date: 02/26/03

  • Next message: Avleen Vig: "How do you patch yours? (was: Monitor Services on Windows machines)" 
    From: "Shackleford, Dave" <znz1@cdc.gov>
To: "'Gooch, Linnie'" <Linnie@wescom.org>, focus-ms@securityfocus.com
Date: Wed, 26 Feb 2003 12:58:41 -0500

    Hi Linnie-

    Well, Tripwire (paid version for Windows) is great, but if you are trying to
    go the free route (and I assume you are), then you may want to try GFI's
    LanGuard System Integrity Monitor, which is offered as FreeWare @
    http://www.gfi.com/lansim/index.html.

    --Dave

    -----Original Message-----
    From: Gooch, Linnie [mailto:Linnie@wescom.org]
    Sent: Tuesday, February 25, 2003 1:00 PM
    To: focus-ms@securityfocus.com
    Subject: Utility to determine who deteled files

    Sorry in advance if this is too simple of a question, but does anyone know
    of a utility to put on a Windows NT / 2000 server to determine who deleted a
    file and when? I know auditing does this, but is very cumbersome and hard to
    read.

    Thanks..

    Linnie Gooch, MCSE
    Assistant Manager of Systems and Technology
    Wescom Credit Union
    (888) 493 7266 x 8801

    **********************************************************************
    This email and any files transmitted with it are confidential
    and intended solely for the use of the individual or entity to
    whom they are addressed. If you have received this email
    in error, please delete it immediately and advise the sender.
    WESCOM CREDIT UNION (626) 535-1000
    **********************************************************************