Clik here to view.
Tracking file permissions changes on a Windows server
Some-thing or Some-one is changing file permissions occasionally on files on my Windows Server 2003 Domain Controller. I’d like to track these changes. Initially I thought one could do this with...
View ArticleClik here to view.
How can I tell who deleted a folder from a public share?
Like a lot of offices we have a few public shares for different teams to save their data. Today I helped someone restore some folders from a shadow copy that had been deleted sometime last week. While...
View ArticleClik here to view.
What is the difference between an Audit Log and a regular Log (In the context...
I am using mod_security: http://www.modsecurity.org/documentation/modsecurity-apache/2.5.12/modsecurity2-apache-reference.pdf What is the difference between and audit log (audit trail) and a normal...
View ArticleClik here to view.
Can Windows logoff events be tracked?
I’m working on an application to track network user logon/logoff events in an Active Directory domain; the application will work by auditing security logs on domain controllers. Auditing logon events...
View ArticleClik here to view.
How do I prove two files are the same legally?
We had someone steal some files before quitting and it has eventually come down to a lawsuit. I’ve now been provided with a cd of files and I have to “prove” that they are our files by matching them...
View ArticleClik here to view.
Log all the activity of screen session to a file
Is that possible to start a screen session on login of any users in Linux system and log each and every activity done by him in a file for later review or email that after his logout.. Basically, I...
View ArticleClik here to view.
Disable auditing of logon type 3 events
I have an older 2003 server that hosts an in house application running on IIS with windows authentication. Is there a ready way to disable auditing only for the logon type 3 (network logon)? This app...
View ArticleClik here to view.
Turn on file auditing on network share in server 2008 r2
I have a server running 2008 R2 , is there a role / function on this that can be added / enabled that audits file access. e.g user1 deleted this folder, this file was edited by user2 etc. I have been...
View ArticleClik here to view.
Creating a custom view for windows log based on a “Contains {text}” rule
I have a server running Windows Server 2008. I’m using Windows Server Auditing to check when and by which user a folder is modified to determine who is modifying it as the modifications are causing...
View ArticleClik here to view.
Looking for app/service to silently capture file changes in website (like SVN...
Here’s the background to my question: A number of people deploy changes to our ASP.NET website … designers deploy HTML and CSS changes, .NET developers deploy ASPX, DLL files, graphic designers deploy...
View Article
