trace tools for seeing what user activity updates what files

pma111
pma111 used Ask the Experts™
on
are there any tools that can run on windows 7 which will capture which specific event logs or files such as log files / files in general , are updated as a result of certain user actions (e.g. opening certain file types, running applications, plugging in devices etc).
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
You can enable Audit Policy on the machine and track all the activities in event viewer. You can check below link for more details on performing the same. It provides good details. You will find more details on this "audit policy" in internet. It is available for Windows 7 as well (I believe your question is for this OS).

https://www.thewindowsclub.com/track-user-activity-windows

Edit: Just be a bit careful using this as it would generate tons of audit information. I would suggest to use this for a brief period of time for which it is required and turn it off. And not use it permanently
Distinguished Expert 2018
Commented:
Audit Policy will help somewhat, but you still need a way to store all that data. If you're wanting logs from all sorts of systems, look at a SIEM.
You can check solution like Lepide and Varonis to track user activities.
Distinguished Expert 2018

Commented:
Other tools would include Netwrix Auditor or ManageEngine Event Log Analyzer.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial