I am new to DLP and I was wondering if there is a way to monitor files and folders on a share with DLP to monitor who may be moving or deleting them?
Edit: I was at first looking for a simple yes or no answer, but I realized I should probably add a little more info. I have ePO 4.6 with McAfee DLP for Endpoints 9.2. We want to monitor a certain share and sub-folders to see who is deleting and moving files. Is this possible wiht this product?Message was edited by: pwilson on 11/5/12 2:15:35 PM CST
You can't really do this with DLP. The easy way is to activate Object Auditing at the server level, and then activate auditing for that folder. It will create in the event log entries that specify which user/computer did what to what file or folder. You can also install Splunk which is free with some limitations to manage those logs, or import them into a log management product if you alrdeady have one.