The tag has no wiki summary.

learn more… | top users | synonyms

3
votes
2answers
307 views

Is there any file check summing software which deals correctly with deep paths?

I have been looking for software which will checksum and verify/compare NTFS volumes with deep paths on Windows, and failing verification on every one I've tried. I've even tried writing my own python ...
3
votes
1answer
97 views

keeping all versions of a directory

I am looking for a tool that can give me a timeline of all changes that where applied to the files in a given directory, together with the contents of all files at any given point. This cannot be ...
1
vote
1answer
415 views

Audit tab in advanced security setting of printer does not appear in Windows 7

I want to audit printer access failures on Windows 7. But when I go to printer properties->security->advanced, there is not Audit tab there. If I try to audit folder, Audit tab is there, but for ...
1
vote
1answer
106 views

Scheduled Personal Software Audit / Inventory

Im trying to be very pro-active with getting a good backup now as my entire digital life as it were is on my laptop inc music etc. I currently take a USB drive backup and an online backup, however i ...
0
votes
1answer
24 views

auditctl -l not showing rules

I have some rules in the audit.conf file. When do auditctl -l, they don't show up. If I restart the auditd service and do auditctl -l again, then the rules show up. Any idea why this? Where can I ...
0
votes
1answer
126 views

Linux network audit

I have a server with Linux Red-hat Enterprise Edition 5.4 installed. and a client/server application that permits connection at the port 6000, but it doesn't offer connections log. I want to know ...
0
votes
1answer
429 views

HDI: Capture specific content types in wireshark?

I've been tasked to audit in/outbound traffic at our site, but I don't know much about Wireshark. I understand how to set up a capture filter for broad protocols (IP only or tcp, udp, icmp, etc), but ...
0
votes
1answer
206 views

Why are the properties for Audit Policy Disabled?

=I am logged in as an Administrator on my machine and when I check Local Security Settings -> Audit Policy -> Audit Account logon events I click on "Properties" and try to turn it off for "Success" ...
-1
votes
1answer
41 views

Windows File Server audit

I would like to know that how to check out the logs of files and folders deletion on windows server 2008 as well as who did it from where and when?
1
vote
0answers
46 views

Windows 7 not staying in audit mode after reset

I am creating a custom image for WDS distribution and I'm having some difficulty, I can boot the reference machine into audit mode during the oobe phase with Ctrl+Shift+F3, but when I reset it (for ...
1
vote
0answers
120 views

Is auditing possible on Windows XP Home Edition?

Although Windows XP Professional has (a lot more) control over Security issues, Windows XP Home Edition does allow the regular user to probe around and allows to set Security settings on folders and ...
1
vote
0answers
44 views

Is there a dpkg -C program which actually checks if the files are present in the filesystem?

In other words, read the dpkg database to see if some of the files are missing. I accidentally the system with rm -rf and then quickly hit ^C when I realised what I was doing but I don't know what's ...
0
votes
0answers
13 views

Automate removal of Audit Policy settings

I have a large number of files in the System32 directory that have audit policy settings that were configured directly as well as other audit policy settings that were inherited. I need to remove all ...
0
votes
0answers
47 views

Windows Audit Mode -cannot login

I am using this link to build a standard image of Windows 7: http://technet.microsoft.com/en-us/library/ee523217%28v=ws.10%29.aspx I got to the Windows Audit Mode point. For some odd reason, when my ...
0
votes
0answers
21 views

Multihop SSH connections not showing up in lastlog

We all know that adding the following to your .ssh/config file will allow seamless ssh hopping through a gateway host: Host *.internal.workdomain.com ProxyCommand ssh gateway.workdomain.com nc %h ...
0
votes
0answers
93 views

Get delete events with file name and user for particular folder

In my windows server 2012 i want to know which files is deleted from a folder by which network user. I want to track delete events only for particular folder. I have done it using group policy and ...
0
votes
0answers
766 views

Windows 7 Security Auditing being turned off - By what?

This has been driving me nuts. I've searched high and low for a solution but have found nothing. I did find this question which I thought held the solution through auditpol.exe. No dice. I can set my ...
0
votes
0answers
105 views

Windows 7 Drive Letter Changed on Data Drive and Can't Log In

I just purchased an SSD for my computer to install the Windows OS files and my program files on, and for my other hard drive for my user directory. I got it all working through an answer file in audit ...
0
votes
0answers
37 views

Meaning of type=BPRM_FCAPS in a ausearch

I and using Linux auditing. In my ausearch results I see entries with type=BPRM_FCAPS Can anyone tell me what they are?