Windows Security Log Encyclopedia by Randy Franklin Smith:
http://www.ultimatewindowssecurity.com/encyclopedia.html
Feigin, Andrew wrote:
Could you post this info when you find it?
-Andrew
------------------------------------------------------------------------
*From:* [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] *On Behalf Of
[EMAIL PROTECTED]
*Sent:* Wednesday, February 08, 2006 12:11 PM
*To:* ActiveDir@mail.activedir.org
*Subject:* RE: [ActiveDir] OT: Tracking File Deletes
Chris, talk to me when you get home. I have a list of all the Event ID
codes and what each means. I would pull them up now but it appears
that the lovely cable company has dropped the internet connection again.
Bonnie
------------------------------------------------------------------------
*From:* [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] *On Behalf Of *TIROA YANN
*Sent:* Wednesday, February 08, 2006 11:56 AM
*To:* ActiveDir@mail.activedir.org
*Subject:* RE: [ActiveDir] OT: Tracking File Deletes
Hello,
here is a good start
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/13w2kadc.mspx
Don not remember the eventid corresponding to file deletions, but
after activated audit, try delete a file.directory and see in the
security logs what eventid is generated for this event.
Cordialement,
Yann TIROA
Centre de Ressources Informatique.
Campus Scientifique de la DOUA.
Bât. Gabriel Lippmann - 2 ème étage - salle 238.
43, Bd du 11 Novembre 1918.
69622 Villeurbanne Cedex.
Web: www.univ-lyon1.fr
------------------------------------------------------------------------
*De :* [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] *De la part de*
Pohlschneider, Chris
*Envoyé :* mercredi 8 février 2006 17:31
*À :* ActiveDir@mail.activedir.org
*Objet :* [ActiveDir] OT: Tracking File Deletes
Sorry if this is a bit off topic, but I was wondering if there is a way to
track file deletions off of a Windows 2000 SP4 file server?
Chris Pohlschneider
Network Administrator
Cenveo-Sidney
937-497-2136
[EMAIL PROTECTED]
Cenveo is your visual communications connection for a broad portfolio of
services and products including eServices, envelopes, offset and digital
printing, labels and business documents
--
Letting your vendors set your risk analysis these days?
http://www.threatcode.com
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
