[Hidden-tech] Auditing software

David Korpiewski davidk at cs.umass.edu
Sun Jan 23 19:28:40 EST 2011


Hi everyone,
    What is the best (and cheap or free) software available to be able 
to perform queries against auditing data.   I set up a GPO for Security 
auditing so that any file is recorded.   But now I want to organize and 
perform queries against it.
    The issue is that we are getting a lot of files deleted on the 
servers and I'm trying to figure out who it is definitely and then build 
a case against them if necessary.  But searching thousands of records 
for a single file that was deleted is extremely difficult and the built 
in filters don't allow for it.

Thank you in advance!
David
-- 
===========================================
David Korpiewski
Software Specialist I
CSCF - Computer Science Computing Facility
Department of Computer Science
Phone: 413-545-4319
Fax:   413-577-2285
===========================================


Google

More information about the Hidden-discuss mailing list