Is it within LEM's capability to prevent/block mass file operations on a server, either accidentally or intentional? It could be as destructive as a user who will be leaving the organization and wiping out files or as innocent as someone accidentally moving a folder into another folder. I'm aware that the LEM agent can block IP addresses or disable accounts but I'm inclined to think that it would be too late for those actions since the file operation is already under way.
↧