Sign in to follow this  
Followers 0
Vangald

File system auditing?

3 posts in this topic

Before I go trying to write something that does this. Is there any program that I can say "I want a list of all files in the Windows and Programs folders." and it will dump a list with maybe a few bits of info of each file? I would especially like one that does this across multiple computers so that I can keep an audit of my network.

0

Share this post


Link to post
Share on other sites

Dont know of any progs that will do this.

Couple of cmd line utils may help though.

Dir > dir.txt

Will pipe the contents out to a file.

You could make it part of a batch file to run on boot.

Then use comp.exe (in system32) to compare the files.

Or something like that.

0

Share this post


Link to post
Share on other sites

You can also use the built-in windows program called "tree"

C:\>tree files
Folder PATH listing
Volume serial number is xxx
C:\FILES
└───more files

C:\>tree /F files
Folder PATH listing
Volume serial number is xxx
C:\FILES
│ 1.txt
│ 2.txt
│ 3.txt

└───more files
4.txt
5.txt
6.txt


C:\>

Make sure to use the /F argument to get a list of files.

It might be easier to enable file auditing on the Windows directory and Program Files directory for each computer through the local group policy http://support.microsoft.com/kb/310399 or through your domain group policy (if you have a domain) and use something like psloglist http://www.microsoft.com/technet/sysintern.../PsLogList.mspx to grab the Security event logs and see if anyone is trying to change anything.

0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0