Forum Home
Press F1
 
Thread ID: 76943 2007-02-21 10:12:00 Files access monitoring Lee Brings (11912) Press F1
Post ID Timestamp Content User
526756 2007-02-21 10:12:00 We have some folders with very sensitive information and we would like to know who accesses them.
We have have file auditing turned on but it's not so easy to look throught the log file.

Any tools suggestions ? (better based on your own experience)

Lee
Lee Brings (11912)
526757 2007-02-21 10:36:00 What OS?

Just an observation, if the files are that sensitive, why aren't they encrypted?

I presume these are people who you suspect of having access to the files, should not have access? If so, have you set up user accounts and permission to restrict access? (Assuming Windows of some sort, dependant on OS and HDD file system, i.e. NTFS).
Murray P (44)
526758 2007-02-22 04:57:00 Exactly. If files are sensitive, your top priority is not to know who has been looking at them. You must prevent unauthorised people from seeing them. After that, it's a good idea to keep an eye on the access logs, just to be sure. ;)

There are various ways of selecting data from log files, Even the very old grep tools would do, to search for lines conmtaining the appropriate file names. There are a lot of *nix string editing programmes or scripting languages which can be used to extract important information. In Windows, you can almost certainly use the "Edit/Find" operation from the log file viewer.
Graham L (2)
1