Windows Event Logs – Can you tell if a file was opened.

Home Forums Other Misc Windows Event Logs – Can you tell if a file was opened.

This topic contains 1 reply, has 2 voices, and was last updated by Avatar wullieb1 3 months ago.

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • Avatar
    scothrsn
    Participant
    #616297

    HI I have a company telling me that they can not tell if files stored on a windows server were opened, copied, or just search for as part of a File Explorer Search. from the log files they have. They state that “an event in the log file has the meaning Windows events actioned by the user have been detected and logged. Windows events logged could be a File Explorer search, a copy, viewing file metadata such as the Properties tab or opening a file and they can not differentiate between them.” Is this correct? I am assuming that it is possible to tell if a file has been opened or just searched for.Am I correct?

    Avatar
    wullieb1
    Moderator
    #616348

    You would need to enable auditing to be able to do this.

Viewing 2 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic.