I can also see that Alice has tried to access these files on separate occasions from different machines.īecause of that, I’m now going to take a closer look at Alice’s overall activity by clicking on her username to bring up a dashboard of all the activity from this user, from the last few days and weeks. Here I can see quickly again that these accesses are denied and they’re by the same user Alice. I can now go ahead and take a closer look at this folder to see who has been accessing it. I can see easily from here that there are some denied accesses on ‘Accounting and Peopleops’ – some very sensitive folders that contain internal and client data. So, I can see the date and time, the file or folder that was accessed or modified, the access type, whether or not it was denied or granted, the user who attempted to access/modify the file, the machine from where the access was made with its client IP address and the server where the file is stored. From there I can go directly into the ‘File Access Viewer’ to see in real time, the accesses that are happening on the shares that I’ve selected. Here in the console of the FileAudit software, the first thing you do is go to audit configuration and select the most sensitive files and folders on your network that you wish to monitor. In this video, I’m going to show you how FileAudit can help you to actively monitor accesses on your shared files and folders.

How to find files by date windows