Reporting on access to C$ (etc.) What does it take on the Microsoft side?

Unanswered Question
Mar 5th, 2009
User Badges:

I see CSMARS 6.x has come canned reports that look for events for C$ admin$ etc, but so far (even though I generate events, and have installed SNARE) I am not seeing any events reporting "admin-share" access. Wht more do I need to do to the Microsoft server, host, or domain to get this working?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)


This Discussion