Solved

Forensic software

Posted on 2012-12-24
5
360 Views
Last Modified: 2012-12-26
I need to find trial or free software ot find out who made changes to server files that contains my licenses
0
Comment
Question by:YRMC_Infrastructure
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 27

Expert Comment

by:davorin
ID: 38719924
I'm affraid that post-festum you will not be able to do that. You would need to already monitor your servers using auditing.
Primer of auditing:
http://support.microsoft.com/kb/325898
0
 
LVL 12

Expert Comment

by:xmlmagician
ID: 38719982
+1 to davorin

one way to narrow it down is if you go to event viewer and security and see who has logged in. that might give you a hint or point you to a direction.
0
 
LVL 96

Expert Comment

by:Lee W, MVP
ID: 38720119
Agreed with the above.

I'd also suggest you start securing the files so that only authorized people have access to files... if they don't need access, put them in a shared folder they don't have access to!
0
 
LVL 4

Accepted Solution

by:
jjjosef earned 500 total points
ID: 38720253
I think you need a complete monitoring software which will monitor all the activities happening in you SQL Server ,exchange server and active directory also and give a report for the same .
In case you can try this out
Windows event log management

Keep Updating us !
0
 
LVL 27

Expert Comment

by:davorin
ID: 38721483
If you didn't enabled auditing on your server you will have no data you need in logs - so even Event Log Manager will not help you.
Event Log Manager is just a tool that shows what is written in event logs in different way...
0

Featured Post

[Webinar] Learn How Hackers Steal Your Credentials

Do You Know How Hackers Steal Your Credentials? Join us and Skyport Systems to learn how hackers steal your credentials and why Active Directory must be secure to stop them. Thursday, July 13, 2017 10:00 A.M. PDT

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Know what services you can and cannot, should and should not combine on your server.
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question