Contents
To view this audit log, go to the Event Viewer. Under Windows Logs, select Security. You can find all the audit logs in the middle pane as displayed below. To filter the event logs to view just the logs about the file/folder permission changes, select Filter Current Log from the right pane.
Click “Audit Policy.” Double-click “Audit Object Access” in the details window. This opens the audit properties for users who connect to your shared folder. Check the boxes labeled “Success” and “Failed.” Selecting “Success” creates a log file each time the user connects successfully.
How can I see who accessed a file?
Navigate to Windows logs > Security.
- Click on the Filter Current Log option on the right pane of the window so the Filter Current Log window appears.
- Under the Task category option, enter the event ID for which you want to view logs. When a file is accessed, the event IDs 4656 and 4663 are logged.
User metadata is obtained from network packets to monitor user activity within the network. In practice, this shows you when users open and close files on file share, download or upload files. The tool also has an alerts feature to notify you about suspicious activity.
Net Share Monitor is the free software to Monitor your Shared Files from unknown users in the network. Whenever any remote user accesses your Shared Files, NetShareMonitor alerts you by blinking the icon in the systray or making the alert sound.
How to monitor network shared files and folders?
For testing purpose, you can just launch NetShareMonitor. Then type (in the Start->Run) \\\\127.0.0.1\\ or \\\\your_hostname\\\\c$. And you will see all shared folders on your system. Now try to open any of the shown folder and you will see NetShareMonitor triggering alert.
About Net Share Monitor is the free software to Monitor your Shared Files from unknown users in the network. Whenever any remote user accesses your Shared Files, NetShareMonitor alerts you by blinking the icon in the systray or making the alert sound.
https://www.youtube.com/watch?v=uov8HoPWyGc