NTFS discovers my secrets

  • Thread starter Thread starter Tom
  • Start date Start date
T

Tom

Yesterday I created in my NTFS a file named SECRET.TXT.
A few minutes later I deleted it in the dos box by DEL
SECRET.TXT.

Today I created the file named SECRET.TXT again at the
same place in the NTFS. But the date of creation was
YESTERDAY - not today!!!

This reveals, that someone on this machine did this
YESTERDAY.
This can be a secret that no one should know!!!
This is a security hole!!!



Tom
 
Yes, the security hole if it exists is that you have excessive ntfs permissions to
your folder allowing other users to write files to it. You can look at the ownership
of the folder in properties/security/advanced/ownership to possibly see who created
it. If you think unauthorized users are accessing your computer, you can enable
auditing of logon events and view logons in the security log in Event Viewer. You
can also enable auditing of object access and then audit a folder for write
permissions to see who is writing to the folder and when.--- Steve

http://support.microsoft.com/default.aspx?scid=KB;en-us;q300958
http://support.microsoft.com/default.aspx?scid=kb;en-us;301640
 
Back
Top