Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Alert if file is moved to specific folder

$
0
0

I resolved the issue.
I put FIM into place on the root folder where the file is before it is assessed and moved, and I also put it on the Invalid folder. I used a test file to see which accounts moved and touch the file if it is read invalid. It was the System account and our Transport account. Then I counted how many time they both touched it. I created an alert that said "If this server reads that these 2 accounts touch this file X amount of time, send email to ABC@DEF.GHI"
Tested it and it works great.


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>