Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: FIM rule based on size of file

$
0
0

FIM does not track file size from anything that I've seen.  Therefore you wouldn't be able to create a rule based on the data from FIM.  The connector settings you're referencing are the types of actions you would like FIM to monitor, so you can either see a file created or not by selecting the appropriate setting.

 

It's possible that another tool you have, or Microsoft File Auditing would track this kind of information.  If you can get an event with file size into the LEM it would be easy to create a rule from there.


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>