Forums
SOx Compliance
File Change log - Windows
Author
Messages
andrew
Veteran Member
Posts: 100
12/24/2012 2:48 PM
We are being asked to provider a summary of Lawson files that are changed and/or updated. I believe audit concerns are when a program code is changed due to a patch...or a user changing the source code.
Do you know of any software that would monitor these changes ?
John Henley
Senior Member
Posts: 3348
12/24/2012 5:27 PM
http://www.bluelance.com/products/lta-9-for-
Greg Moeller
Veteran Member
Posts: 1498
2/14/2013 7:52 PM
I know I'm a little late to this game, but I have a suggestion that we are running here...
It's great... runs on Windows, Unix and Linux and it's even GPL'd.
http://www.tucows.com/preview/51638
Set it up to monitor the directories of concern, run it a few weeks, while you put in exceptions for particular files that you don't really care about, and you're set. We have it monitoring our core Unix system as well as the Lawson system.
Greg Moeller
Veteran Member
Posts: 1498
2/14/2013 7:53 PM
If you'd like, I'd be happy to share the script that we run here.
andrew
Veteran Member
Posts: 100
3/21/2013 6:19 PM
Hi
Thanks for the replies.
We setup windows security auditing, it records an event (4663) when a file changes in lawdir\prod90 directory.
Then we setup a task to auto e-mail a couple users when a file changes.
To add to the solution we used the windows "wevtutil" to record the contents of the event, so the e-mail contains the exact file that was changed.
Hopefully this will be sufficient; but knowing Auditors - we will need more information.
thanks again