RE: Looking for the softwares to monitor our file server

Hello,

Why standard Windows auditing is not enough?
All you have to do is to enable Audit Object Access in Local Security Policy
and enable specific auditing (in your case delete) on the folder you want to
audit.

I believe it's a cheapest way. :)

Goran Pizent




-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx] On
Behalf Of Truong duc Luong
Sent: Monday, September 25, 2006 8:47 AM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: Looking for the softwares to monitor our file server

Hi all,
I'm a network manager at smal-size company. We've one file server
using Windows 2003 server. I'm only using Event Viewer to log all
operation with the file server. Recently, some important data in the
file server have been deleted. So, I can't detect when does this
operation occurs? And Who do this?
To improve the logging capability, i googled and found this software:
Alfa File Monitor (http://www.alfasp.com/products.html). It meets with
our requirement, but very expensive (1.999 EUR).
Do you know any software like Alfa File Monitor (with less price) ?
The software can answer quetions:
- Who does delete, modify the file server?
- When does this occurs?

Many thanks,
--
No Pain No Gain

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • RE: A degree in MSIA - the various programs
    ... I am a 2005 graduate of the Norwich University Information Assurance ... Norwich is the well-known Information Security Specialist, ...
    (Security-Basics)
  • How to get into Penetration testing?
    ... I think it is very good for a pen tester to have programming ... security company's position. ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ...
    (Security-Basics)
  • Re: Changing user password policy
    ... doing this with good security. ... > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... > The NSA has designated Norwich University a center of Academic Excellence ... Our program offers unparalleled Infosec management ...
    (Security-Basics)
  • RE: Sandboxie
    ... No sandbox product is fool proof. ... Java's first security model was fairly secure. ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic ...
    (Security-Basics)
  • RE: The VA Stolen Laptop - Lessons Learned
    ... workplace and, anytime sensitive data like that is put on a laptop, encrypt ... I think you have to plan out system security before you implement ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ...
    (Security-Basics)