Hi everyone, What is the best (and cheap or free) software available to be able to perform queries against auditing data. I set up a GPO for Security auditing so that any file is recorded. But now I want to organize and perform queries against it. The issue is that we are getting a lot of files deleted on the servers and I'm trying to figure out who it is definitely and then build a case against them if necessary. But searching thousands of records for a single file that was deleted is extremely difficult and the built in filters don't allow for it. Thank you in advance! David -- =========================================== David Korpiewski Software Specialist I CSCF - Computer Science Computing Facility Department of Computer Science Phone: 413-545-4319 Fax: 413-577-2285 ===========================================