?
Solved

Forensic software

Posted on 2012-12-24
5
Medium Priority
?
361 Views
Last Modified: 2012-12-26
I need to find trial or free software ot find out who made changes to server files that contains my licenses
0
Comment
Question by:YRMC_Infrastructure
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 27

Expert Comment

by:davorin
ID: 38719924
I'm affraid that post-festum you will not be able to do that. You would need to already monitor your servers using auditing.
Primer of auditing:
http://support.microsoft.com/kb/325898
0
 
LVL 12

Expert Comment

by:xmlmagician
ID: 38719982
+1 to davorin

one way to narrow it down is if you go to event viewer and security and see who has logged in. that might give you a hint or point you to a direction.
0
 
LVL 96

Expert Comment

by:Lee W, MVP
ID: 38720119
Agreed with the above.

I'd also suggest you start securing the files so that only authorized people have access to files... if they don't need access, put them in a shared folder they don't have access to!
0
 
LVL 4

Accepted Solution

by:
jjjosef earned 1000 total points
ID: 38720253
I think you need a complete monitoring software which will monitor all the activities happening in you SQL Server ,exchange server and active directory also and give a report for the same .
In case you can try this out
Windows event log management

Keep Updating us !
0
 
LVL 27

Expert Comment

by:davorin
ID: 38721483
If you didn't enabled auditing on your server you will have no data you need in logs - so even Event Log Manager will not help you.
Event Log Manager is just a tool that shows what is written in event logs in different way...
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question