File/Folder Audit Trails for Windows®
CPTRAX for Windows
CPTRAX for Windows provides Real-Time File System Audit Trails for Windows Servers. Now you can audit who accessed your Windows files and folders. CPTRAX provides customized audit reports, report on just the data you want to report on.
CPTRAX for Windows is different than other File System Audit tools you may be using or have tested:
- Does not use Windows Event Logs
- Is not a snapshot tool that only notices after changes are made
- No changes to your Windows security configuration
- Audits local and remote file access in real-time including identification of IP address, workstation and user name
CPTRAX for Windows provides you visibility on who is creating, accessing, and deleting your data! CPTRAX for Windows provides complete audit trails of selected file and folder accesses. You can choose to configure alerts to be delivered via email and our desktop alert agent.
CPTRAX for Windows provides the following Windows file system audit trail information for remote and local users including terminal service sessions via a lightweight server agent:
- Tracking of File System Access for opens, deletes, renames, modifications, ownership changes and permission changes
- Tracking of Folder Access for deletes, renames, modifications, ownership changes and permission changes
- Denial of File System Access for unwanted creates, deletes, renames and modifications
- Denial of Folder System Access for unwanted deletes, creates and renames
- Receive real-time alerts via email
- Receive real-time alerts via desktop popup (using our Alert Agent)
- Interoperability across unrelated Domains, Active Directory Forests and stand-alone servers/workstations
- Scalable Administration interface that enables functionality on a small network to one with thousands of servers
- Unattended and Scheduled Reporting
- Automatic purging of old activity logs
- Encrypted activity logs
CPTRAX for Windows optionally provides the following via the same lightweight server agent:
- Track Kerberos, NTLM and NTLMSSP Logon and Logoff Activity
- Track Failed Kerberos, NTLM and NTLMSSP Logon Activity
- Track Terminal Server and Citrix® Session Logon and Logoff Activity
Selected File System Audit Trail details included in each CPTRAX for Windows report:
- Workstation Name and IP Address
- SAM Account Name and LDAP Accout Name
- Security Identifier (SID)
- Total Time Logged On
- Share Used
- Full File System Path
- ACL Permissions
- Remote Computer Name and IP Address for WTS/RDP Sessions
