RE: Utility to determine who deteled files

From: Shackleford, Dave <znz1(at)cdc.gov>
Date: Wed Feb 26 2003 - 12:58:41 EST

Hi Linnie-

Well, Tripwire (paid version for Windows) is great, but if you are trying to go the free route (and I assume you are), then you may want to try GFI's LanGuard System Integrity Monitor, which is offered as FreeWare @ http://www.gfi.com/lansim/index.html.

--Dave

-----Original Message-----
From: Gooch, Linnie [mailto:Linnie@wescom.org] Sent: Tuesday, February 25, 2003 1:00 PM To: focus-ms@securityfocus.com
Subject: Utility to determine who deteled files

Sorry in advance if this is too simple of a question, but does anyone know of a utility to put on a Windows NT / 2000 server to determine who deleted a file and when? I know auditing does this, but is very cumbersome and hard to read.

Thanks..

Linnie Gooch, MCSE
Assistant Manager of Systems and Technology Wescom Credit Union
(888) 493 7266 x 8801

---

This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please delete it immediately and advise the sender. WESCOM CREDIT UNION (626) 535-1000

---

Received on Wed Feb 26 16:39:19 2003