PrevPrev Go to previous topic
NextNext Go to next topic
Last Post 03/21/2013 2:19 PM by  andrew
File Change log - Windows
 4 Replies
Sort:
You are not authorized to post a reply.
Author Messages
andrew
Veteran Member
(188 points)
Veteran Member
Posts:100


Send Message:

--
12/24/2012 9:48 AM
    We are being asked to provider a summary of Lawson files that are changed and/or updated. I believe audit concerns are when a program code is changed due to a patch...or a user changing the source code.

    Do you know of any software that would monitor these changes ?
    0
    John Henley
    Private
    Private
    Senior Member
    (9563 points)
    Senior Member
    Posts:3205


    Send Message:

    --
    12/24/2012 12:27 PM
    Thanks for using the LawsonGuru.com forums!
    John
    0
    Greg Moeller
    Private
    Private
    Veteran Member
    (3873 points)
    Veteran Member
    Posts:1377


    Send Message:

    --
    02/14/2013 2:52 PM
    I know I'm a little late to this game, but I have a suggestion that we are running here...
    It's great... runs on Windows, Unix and Linux and it's even GPL'd.
    http://www.tucows.com/preview/51638

    Set it up to monitor the directories of concern, run it a few weeks, while you put in exceptions for particular files that you don't really care about, and you're set. We have it monitoring our core Unix system as well as the Lawson system.
    0
    Greg Moeller
    Private
    Private
    Veteran Member
    (3873 points)
    Veteran Member
    Posts:1377


    Send Message:

    --
    02/14/2013 2:53 PM
    If you'd like, I'd be happy to share the script that we run here.
    0
    andrew
    Veteran Member
    (188 points)
    Veteran Member
    Posts:100


    Send Message:

    --
    03/21/2013 2:19 PM
    Hi
    Thanks for the replies.
    We setup windows security auditing, it records an event (4663) when a file changes in lawdir\prod90 directory.

    Then we setup a task to auto e-mail a couple users when a file changes.

    To add to the solution we used the windows "wevtutil" to record the contents of the event, so the e-mail contains the exact file that was changed.

    Hopefully this will be sufficient; but knowing Auditors - we will need more information.

    thanks again
    0
    You are not authorized to post a reply.