Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Detecting File Alteration

Subject: Detecting File Alteration
Date: Wed, 30 Aug 2006 14:05:43 -0400
Hello list,

Is there any Windows tool out there that allows me to hook into the Master
File Table (MFT) and view all entries being updated, as they are being
updated? In other words, every time the Modified, Access, Created (MAC) time
of any file gets changed I would like to see it dumped out in chronological
order, similar to how Systernals Regmon tracks registry changes. Any ability
to filter or sort by process and so on would just be a bonus.

Is there a more appropriate list for me to post this question to other than
Security Basics?

Thanks for your help,
Scott

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.


http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>