RE: File Monitoring Program

From: Bruyere, Michel (mbruyere@ezemcanada.com)
Date: 12/11/02

  • Next message: Mark Maher: "Re: Telnet Security Question for a Router." 
    From: "Bruyere, Michel" <mbruyere@ezemcanada.com>
To: "'oc@hushmail.com'" <oc@hushmail.com>, security-basics@securityfocus.com
Date: Wed, 11 Dec 2002 15:06:35 -0500

    HI,
            Try filemon at
    http://www.sysinternals.com/ntw2k/source/filemon.shtml

    > -----Original Message-----
    > From: oc@hushmail.com [mailto:oc@hushmail.com]
    > Sent: mercredi 11 décembre 2002 09:33
    > To: security-basics@securityfocus.com
    > Subject: File Monitoring Program
    >
    >
    >
    > -----BEGIN PGP SIGNED MESSAGE-----
    >
    > Greetings and Salutations:
    >
    > I have been scouring www.google.com, www.securityfocus.com,
    > and www.ussrback.com for information containing a program
    > that will log all file access on a win2k server. I have found
    > nothing that will meet the requirements I am searching for.
    >
    > Basically, I would like to know if anyone knows of a program
    > that can monitor file activity, from an .exe down to the .dll
    > that will show the time/date of activity and the
    > username/login name of the person attempting to access the
    > file. If it could be configured to only monitor a certain
    > drive or even a certain folder that would be great.
    >
    > I know that I can do it with the built-in Auditing feature in
    > Win2k, but I would like something a bit more robust and
    > easier to give to my administration.
    >
    > Thank You For Your Time.
    >
    >
    >
    > -----BEGIN PGP SIGNATURE-----
    > Version: Hush 2.2 (Java)
    > Note: This signature can be verified at
    > https://www.hushtools.com/verify
    >
    >
    > wlcEARECABcFAj33TQAQHG9jQGh1c2htYWlsLmNvbQAKCRBTElmSweY2yWaaAJ0fb8DV
    > JBEoGkSyghK4G/k03g6g9QCgtHFL0OdCFUbY44agAFxXDiSOKy8=
    > =AQC5
    > -----END PGP SIGNATURE-----
    >
    >
    >
    >
    > Concerned about your privacy? Follow this link to get
    > FREE encrypted email: https://www.hushmail.com/?l=2
    >
    > Big $$$ to be made with the HushMail Affiliate Program:
    > https://www.hushmail.com/about.php?subloc=affiliate&l=427
    >

    Relevant Pages

    • RE: File Monitoring Program
      ... > that will log all file access on a win2k server. ... If it could be configured to only monitor a certain ... Views expressed in this message are those of the individual sender, and are not necessarily the views of the Central Sydney Area Health Service." ...
      (Security-Basics)
    • RE: File Monitoring Program
      ... dir life | find "Andy" /I ... > that will log all file access on a win2k server. ... > that can monitor file activity, from an .exe down to the .dll ... If it could be configured to only monitor a certain ...
      (Security-Basics)
    • RE: Downloading .exes with WebClient.DownloadFile
      ... Thanks for your response. ... I suggest you to monitor the file access by using FileMon.exe which can ... Microsoft Online Partner Support ...
      (microsoft.public.dotnet.general)
    • Re: Files getting corrupted in IDE
      ... Did you monitor the file access using FileMon? ... This posting is provided "as is" with no warranties and confers no rights. ...
      (microsoft.public.dotnet.general)
    • Re: Outlook is retrieving data from Exchange server error - Weird
      ... Or just win2k server, check Dan t's post if you are running anything over ... win2k server with more than 2gb of ram. ... I am continuing to monitor and search for ... >> I did run the best practrices, some other diags from Msoft, the best ...
      (microsoft.public.exchange.clients)