1

I have a customer who has experienced data file theft (copied filed) is there software or a way to detect this copying of multiple files

Or do i have to write something?

7
  • How did they see that the file was copied?
    – Rinzwind
    Feb 23, 2015 at 17:44
  • I caught the user red handed "by accident" in walking past the user. Feb 23, 2015 at 17:54
  • oh lucky catch then :D I have seen tools like "iwatch" BUT that does not track "copy" (a copy does not edit the file itself and all those tracking tools focus on changes...).
    – Rinzwind
    Feb 23, 2015 at 17:55
  • I figured the system knows when a file is accessed (read) if one could right code to detect if a user accesses more than like 20 files in a period of say 5 minutes it will lock the user account and alert admin! Feb 23, 2015 at 17:59
  • doubt it. Easiest method: I would alias the "cp" command and add a mail command so you get a mail when a file is copied.
    – Rinzwind
    Feb 23, 2015 at 18:02

0

You must log in to answer this question.

Browse other questions tagged .