how to log access to important files

how to log access to important files

am 14.06.2006 15:27:12 von bob.elliott

I'm running Windows 2000, due to security reasons I need to log some
file operations. Say, I need to know all file operation (open, modify,
delete) for folder D:\Docs. Is there any way to do so?

Re: how to log access to important files

am 14.06.2006 16:42:05 von Sebastian Gottschalk

bob.elliott@aks-labs.com wrote:
> I'm running Windows 2000, due to security reasons I need to log some
> file operations. Say, I need to know all file operation (open, modify,
> delete) for folder D:\Docs. Is there any way to do so?

Windows 2000 supports Auditing which can be defined on almost any
object, but this would fill up your Security Event Log and therefore
should be limited to important objects only.

So you may take a look at Filemon from Sysinternals. It has an option to
link in at boot process and then keeps on silently logging everything
until the GUI the next time.

Re: how to log access to important files

am 14.06.2006 16:45:57 von Sebastian Gottschalk

bob.elliott@aks-labs.com wrote:
> I'm running Windows 2000, due to security reasons I need to log
> some file operations. Say, I need to know all file operation (open,
> modify, delete) for folder D:\Docs. Is there any way to do so?

Windows 2000 supports Auditing which can be defined on almost any
object, but this would fill up your Security Event Log and therefore
should be limited to important objects only.

So you may take a look at Filemon from Sysinternals. It has an option to
link in at boot process and then keeps on silently logging everything
until you start the program again.