ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Windows Server 2012 R2 - Share Auditing for Changes

    Scheduled Pinned Locked Moved IT Discussion
    windows server 2012 r2windows serverserverwindowssharesauditingbackupschange rateveeam backup and replication
    3 Posts 2 Posters 1.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • wrx7mW
      wrx7m
      last edited by wrx7m

      I have a Windows 2012 R2 file server that has a fairly significant change rate sometime between Thursday and Friday's incremental backups, every other week. A full backup in Veeam is about 471 GB and the change rate for a Friday backup is between approximately 28% and 54%!

      It has been occurring for some time, so I would like to figure out which files/folders and who/what the hell is triggering it. Is there an easy way to figure that out with the native Windows tools?

      1 Reply Last reply Reply Quote 0
      • IRJI
        IRJ
        last edited by

        I know you use wazuh..

        Check this out

        https://documentation.wazuh.com/current/user-manual/capabilities/file-integrity/index.html

        wrx7mW 1 Reply Last reply Reply Quote 1
        • wrx7mW
          wrx7m @IRJ
          last edited by

          @IRJ said in Windows Server 2012 R2 - Share Auditing for Changes:

          I know you use wazuh..

          Check this out

          https://documentation.wazuh.com/current/user-manual/capabilities/file-integrity/index.html

          Thanks! Checking out setting this up. Hopefully, it will reveal the culprit.

          1 Reply Last reply Reply Quote 0
          • 1 / 1
          • First post
            Last post