RE: System/file monitoring

2012-09-26 Thread Christopher Bodnar 
It isn't cheap. Usually not the best choice for a smaller company. As ASB 
mentioned there is Tripwire as well. I use both products and there is some 
overlap with functionality. I consider Tripwire more of a compliance tool, 
as where Varonis is more of an auditing tool. I think DataAdvantage would 
better fit your needs in this case. 

YMMV

Chris







From:   "Ray" 
To: "NT System Admin Issues" 
Date:   09/25/2012 02:07 PM
Subject:RE: System/file monitoring



I couldn’t even find a price.  The demo says “in a couple hours our 
engineers will help get you up and running”. 
 
From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Tuesday, September 25, 2012 10:12 AM
To: NT System Admin Issues
Subject: Re: System/file monitoring
 
Varonis is a strong player here, but the price will probably be higher. 
OTOH, I did suggest TripWire which is not known for low prices in the 
enterprise space. :)

ASB
http://XeeMe.com/AndrewBaker
Harnessing the Advantages of Technology for the SMB market…


On Tue, Sep 25, 2012 at 8:18 AM, Christopher Bodnar <
christopher_bod...@glic.com> wrote:
Have you looked at this? 

http://www.varonis.com/products/datadvantage/windows/index.html 




Chris 






From:"Ray"  
To:"NT System Admin Issues"  
Date:    09/24/2012 05:45 PM 
Subject:RE: System/file monitoring 



Auditing has been enabled. The MS logfiles are just too "chatty". But
filesystemwatcher looks interesting. Thanks. 
-Original Message-
From: Joseph L. Casale [
mailto:jcas...@activenetwerx.com] 
Sent: Monday, September 24, 2012 1:34 PM
To: NT System Admin Issues
Subject: RE: System/file monitoring

I have to be honest, I wouldn't pay for such a thing.
A quick look has me guessing windows can provide all this info natively.
Enabling auditing for example and use a query to mine the relevant info. 
If
you needed to act on a file system event, there is the file system watcher
class which you can leverage either yourself or through some opensource
implementations that allow you to run the watcher as a service.

Is what your after just logging for accountability?

jlc

From: Ray [rz...@qwest.net]
Sent: Monday, September 24, 2012 2:09 PM

To: NT System Admin Issues
Subject: System/file monitoring

I tried a trial version of this: 
http://www.poweradmin.com/file-sight/ =

which seems to do what I need.  I have a lot of users I can't necessarily
trust, not to mention just being careless. Anyway, what this does is just
keep an eye on the folders and files to see who's creating, deleting or
moving them.

Just curious if anyone's using something "better".

TIA
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


-
This message, and any attachments to it, may contain information
that is privileged, confidential, and exempt from disclosure under
applicable law.  If the reader of this message is not the intended
recipient, you are notified that any use, dissemination,
distribution, copying, or communication of this message is strictly
prohibited.  If you have received this message in error, please
notify the sender immediately by return e-mail and delete the
message and any attachments.  Thank you.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: System/file monitoring

2012-09-25 Thread Ray 
I couldn't even find a price.  The demo says "in a couple hours our
engineers will help get you up and running".

 

From: Andrew S. Baker [mailto:asbz...@gmail.com] 
Sent: Tuesday, September 25, 2012 10:12 AM
To: NT System Admin Issues
Subject: Re: System/file monitoring

 

Varonis is a strong player here, but the price will probably be higher.
OTOH, I did suggest TripWire which is not known for low prices in the
enterprise space. :)



ASB


http://XeeMe.com/AndrewBaker


Harnessing the Advantages of Technology for the SMB market.





On Tue, Sep 25, 2012 at 8:18 AM, Christopher Bodnar
 wrote:

Have you looked at this? 

 <http://www.varonis.com/products/datadvantage/windows/index.html>
http://www.varonis.com/products/datadvantage/windows/index.html 






Chris 








From:"Ray"  
To:"NT System Admin Issues"  
Date:    09/24/2012 05:45 PM 
Subject:RE: System/file monitoring 

  _  





Auditing has been enabled. The MS logfiles are just too "chatty". But
filesystemwatcher looks interesting. Thanks. 

-Original Message-
From: Joseph L. Casale [

 <mailto:jcas...@activenetwerx.com> mailto:jcas...@activenetwerx.com] 

Sent: Monday, September 24, 2012 1:34 PM
To: NT System Admin Issues

Subject: RE: System/file monitoring

I have to be honest, I wouldn't pay for such a thing.
A quick look has me guessing windows can provide all this info natively.
Enabling auditing for example and use a query to mine the relevant info. If
you needed to act on a file system event, there is the file system watcher
class which you can leverage either yourself or through some opensource
implementations that allow you to run the watcher as a service.

Is what your after just logging for accountability?

jlc

From: Ray [rz...@qwest.net]

Sent: Monday, September 24, 2012 2:09 PM


To: NT System Admin Issues

Subject: System/file monitoring

I tried a trial version of this: 

 <http://www.poweradmin.com/file-sight/>
http://www.poweradmin.com/file-sight/ =


which seems to do what I need.  I have a lot of users I can't necessarily
trust, not to mention just being careless. Anyway, what this does is just
keep an eye on the folders and files to see who's creating, deleting or
moving them.

Just curious if anyone's using something "better".

TIA

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: System/file monitoring

2012-09-25 Thread Ray 
Not yet.  Thanks! 

 

From: Christopher Bodnar [mailto:christopher_bod...@glic.com] 
Sent: Tuesday, September 25, 2012 5:18 AM
To: NT System Admin Issues
Subject: RE: System/file monitoring

 

Have you looked at this? 

 <http://www.varonis.com/products/datadvantage/windows/index.html>
http://www.varonis.com/products/datadvantage/windows/index.html 






Chris 








From:"Ray"  
To:"NT System Admin Issues"  
Date:09/24/2012 05:45 PM 
Subject:RE: System/file monitoring 

  _  




Auditing has been enabled. The MS logfiles are just too "chatty". But
filesystemwatcher looks interesting. Thanks. 

-Original Message-
From: Joseph L. Casale [ <mailto:jcas...@activenetwerx.com>
mailto:jcas...@activenetwerx.com] 
Sent: Monday, September 24, 2012 1:34 PM
To: NT System Admin Issues
Subject: RE: System/file monitoring

I have to be honest, I wouldn't pay for such a thing.
A quick look has me guessing windows can provide all this info natively.
Enabling auditing for example and use a query to mine the relevant info. If
you needed to act on a file system event, there is the file system watcher
class which you can leverage either yourself or through some opensource
implementations that allow you to run the watcher as a service.

Is what your after just logging for accountability?

jlc

From: Ray [rz...@qwest.net]
Sent: Monday, September 24, 2012 2:09 PM
To: NT System Admin Issues
Subject: System/file monitoring

I tried a trial version of this:  <http://www.poweradmin.com/file-sight/>
http://www.poweradmin.com/file-sight/ =
which seems to do what I need.  I have a lot of users I can't necessarily
trust, not to mention just being careless. Anyway, what this does is just
keep an eye on the folders and files to see who's creating, deleting or
moving them.

Just curious if anyone's using something "better".

TIA


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
< <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
 <http://lyris.sunbelt-software.com/read/my_forums/>
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
< <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
 <http://lyris.sunbelt-software.com/read/my_forums/>
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ < <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>
http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
<http://lyris.sunbelt-software.com/read/my_forums/>
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

- This message, and any attachments
to it, may contain information that is privileged, confidential, and exempt
from disclosure under applicable law. If the reader of this message is not
the intended recipient, you are notified that any use, dissemination,
distribution, copying, or communication of this message is strictly
prohibited. If you have received this message in error, please notify the
sender immediately by return e-mail and delete the message and any
attachments. Thank you. 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: System/file monitoring

2012-09-25 Thread Christopher Bodnar 
Have you looked at this? 

http://www.varonis.com/products/datadvantage/windows/index.html





Chris






From:   "Ray" 
To: "NT System Admin Issues" 
Date:   09/24/2012 05:45 PM
Subject:    RE: System/file monitoring



Auditing has been enabled. The MS logfiles are just too "chatty". But
filesystemwatcher looks interesting. Thanks. 

-Original Message-
From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] 
Sent: Monday, September 24, 2012 1:34 PM
To: NT System Admin Issues
Subject: RE: System/file monitoring

I have to be honest, I wouldn't pay for such a thing.
A quick look has me guessing windows can provide all this info natively.
Enabling auditing for example and use a query to mine the relevant info. 
If
you needed to act on a file system event, there is the file system watcher
class which you can leverage either yourself or through some opensource
implementations that allow you to run the watcher as a service.

Is what your after just logging for accountability?

jlc

From: Ray [rz...@qwest.net]
Sent: Monday, September 24, 2012 2:09 PM
To: NT System Admin Issues
Subject: System/file monitoring

I tried a trial version of this: http://www.poweradmin.com/file-sight/ =
which seems to do what I need.  I have a lot of users I can't necessarily
trust, not to mention just being careless. Anyway, what this does is just
keep an eye on the folders and files to see who's creating, deleting or
moving them.

Just curious if anyone's using something "better".

TIA


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
<http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
<http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



-
This message, and any attachments to it, may contain information
that is privileged, confidential, and exempt from disclosure under
applicable law.  If the reader of this message is not the intended
recipient, you are notified that any use, dissemination,
distribution, copying, or communication of this message is strictly
prohibited.  If you have received this message in error, please
notify the sender immediately by return e-mail and delete the
message and any attachments.  Thank you.
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: System/file monitoring

2012-09-24 Thread Kennedy, Jim 
Consider what Joeseph is suggesting. I say this because if you invest either in 
a roll your own event log solution or buy one then you have something that you 
can use for far more than just file/folder monitoring. Next week/month you will 
have a need or desire to audit something else. If you go down his road you are 
already there. Yes more time and effort up front but it will pay you back.


From: Joseph L. Casale [jcas...@activenetwerx.com]
Sent: Monday, September 24, 2012 6:05 PM
To: NT System Admin Issues
Subject: RE: System/file monitoring

>Auditing has been enabled. The MS logfiles are just too "chatty". But
>filesystemwatcher looks interesting. Thanks.

That's why you need to extract what you are looking for:) Once you decide
what it is that interests you, you can script it and automate it.

The interface actually provides a means to filter them to help you decide. 
Create
a custom view, get it right than switch to the xml view and see how its done.

Now you can automate it, if you want a sample let me know.

jlc
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: System/file monitoring

2012-09-24 Thread Joseph L. Casale 
>Auditing has been enabled. The MS logfiles are just too "chatty". But
>filesystemwatcher looks interesting. Thanks.

That's why you need to extract what you are looking for:) Once you decide
what it is that interests you, you can script it and automate it.

The interface actually provides a means to filter them to help you decide. 
Create
a custom view, get it right than switch to the xml view and see how its done.

Now you can automate it, if you want a sample let me know.

jlc
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: System/file monitoring

2012-09-24 Thread Ray 
Auditing has been enabled. The MS logfiles are just too "chatty". But
filesystemwatcher looks interesting. Thanks. 

-Original Message-
From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] 
Sent: Monday, September 24, 2012 1:34 PM
To: NT System Admin Issues
Subject: RE: System/file monitoring

I have to be honest, I wouldn't pay for such a thing.
A quick look has me guessing windows can provide all this info natively.
Enabling auditing for example and use a query to mine the relevant info. If
you needed to act on a file system event, there is the file system watcher
class which you can leverage either yourself or through some opensource
implementations that allow you to run the watcher as a service.

Is what your after just logging for accountability?

jlc

From: Ray [rz...@qwest.net]
Sent: Monday, September 24, 2012 2:09 PM
To: NT System Admin Issues
Subject: System/file monitoring

I tried a trial version of this: http://www.poweradmin.com/file-sight/ =
which seems to do what I need.  I have a lot of users I can't necessarily
trust, not to mention just being careless. Anyway, what this does is just
keep an eye on the folders and files to see who's creating, deleting or
moving them.

Just curious if anyone's using something "better".

TIA


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
<http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
<http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: System/file monitoring

2012-09-24 Thread Joseph L. Casale 
I have to be honest, I wouldn't pay for such a thing.
A quick look has me guessing windows can provide all this info natively. 
Enabling
auditing for example and use a query to mine the relevant info. If you needed 
to act
on a file system event, there is the file system watcher class which you can 
leverage
either yourself or through some opensource implementations that allow you to 
run the
watcher as a service.

Is what your after just logging for accountability?

jlc

From: Ray [rz...@qwest.net]
Sent: Monday, September 24, 2012 2:09 PM
To: NT System Admin Issues
Subject: System/file monitoring

I tried a trial version of this: http://www.poweradmin.com/file-sight/ =
which seems to do what I need.  I have a lot of users I can't necessarily
trust, not to mention just being careless. Anyway, what this does is just
keep an eye on the folders and files to see who's creating, deleting or
moving them.

Just curious if anyone's using something "better".

TIA


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin