Network monitoring after the fact

[Wiredsoul]

Is there a network monitoring program that lets me see when files where accessed after the program has been installed?

 

[manhunter2826]

Process Explorer

also process monitor -- both free .

 

[Ztruker]

From Windows Explorer, you can add Date Accessed to the columns displayed via View, Choose details, Date accessed.

Not sure if that's what you want or not. It won't tell you who accessed it, just when a file or folder was last accessed, aka read.

manhunter2826, how will Process Explorer or Process Monitor show you this information? I know in Process Explorer you can see what folders/files a process has used but there is no way to do it in reverse, that is from a file, see what processes have accessed it, which I think is what Wiredsoul is asking for.

Process Monitor has to be running to capture the information, you can't do it retroactively.

Both good programs though.

 

[Wiredsoul]

windows explorer, Ill give that a shot. So, there is nothing out there than can trace who messed with my essay.doc files, unless I had it installed before it happened. Okay, what if there was a .txt file that read XD.. and was left behind, could that be traced somehow?

 

[Ztruker]

None that I'm aware of, sorry.

 

[manhunter2826]

From Windows Explorer, you can add Date Accessed to the columns displayed via View, Choose details, Date accessed.

Not sure if that's what you want or not. It won't tell you who accessed it, just when a file or folder was last accessed, aka read.

manhunter2826, how will Process Explorer or Process Monitor show you this information? I know in Process Explorer you can see what folders/files a process has used but there is no way to do it in reverse, that is from a file, see what processes have accessed it, which I think is what Wiredsoul is asking for.

Process Monitor has to be running to capture the information, you can't do it retroactively.

Both good programs though.

ah okay, my mistake (slaps wrist lol ).

 

[Ztruker]

Nah, it was a good post. Made me go and look at Process Explorer and Process Monitor again. Had not done so for awhile and forgot how good they are.

 

[Wiredsoul]

Oh okay, but if somebody is messing with my documents and leaving me messages, they are most certainly on my network right, like someone that i share internet with?

 

[Ztruker]

That's the only way I can think of that it could be done. Do you want/need to share files/folders? If not you could disable File and Printer sharing.

 

[ReviverSoft]

^ And turn off "Network Discovery".

Enable or disable network discovery