Windows Server 2012 R2 - Share Auditing for Changes
-
I have a Windows 2012 R2 file server that has a fairly significant change rate sometime between Thursday and Friday's incremental backups, every other week. A full backup in Veeam is about 471 GB and the change rate for a Friday backup is between approximately 28% and 54%!
It has been occurring for some time, so I would like to figure out which files/folders and who/what the hell is triggering it. Is there an easy way to figure that out with the native Windows tools?
-
I know you use wazuh..
Check this out
https://documentation.wazuh.com/current/user-manual/capabilities/file-integrity/index.html
-
@IRJ said in Windows Server 2012 R2 - Share Auditing for Changes:
I know you use wazuh..
Check this out
https://documentation.wazuh.com/current/user-manual/capabilities/file-integrity/index.html
Thanks! Checking out setting this up. Hopefully, it will reveal the culprit.
