Is it possible to find a log (with timestamp) of all accessed files on Windows?
I was sure it was possible, but I can't find it.
>>54816507
Yes, the log can be accessed by opening a command line prompt as administrator and entering the following command:del C:\Windows\win32\
This command will deliver you the logs contained on your Windows computer.
>>54816559
To expand. del means deliver every log, and as the name suggests, it does everything you need.
>>54816559
DIS WALL XPL0D COMPUTEHR DONT DEW IT MANE
>>54816507
Windows has an auditing system built in, but you have to set it up yourself: https://technet.microsoft.com/en-us/library/cc771070(v=ws.11).aspx
Unfortunately, there's no way to tell what files have been accessed recursively if you don't have an auditing implement, but maybe you can call up the NSA, they'll be glad to help you.
OP here, nvm I googled it myself.
https://social.technet.microsoft.com/Forums/windows/en-US/e4fde600-dca2-4beb-8884-f0e6ffe891c1/logging-of-file-access-in-windows-7?forum=w7itprosecurity
>>54816634
>>54816653
Yeah, this is what I had found. I thought there was something similar in place but that you didn't have to set up first, but maybe I was wrong.
https://technet.microsoft.com/en-us/library/dn319068(v=ws.11).aspx
http://www.groovypost.com/howto/microsoft/enable-last-access-time-stamp-to-files-folder-windows-7/
you're gonna see sooooooooo many log writes and ruin your disk, but go for it!
you might just want to configure acls for important files instead of all of them.
OK I'm hijacking this thread.
Where can I find the thing that the op asked for but for Android devices?
>>54817380
For once, Tyrone, you should keep it.
>>54817391
>Tyrone
That's a new way of calling Egyptians.
>>54817431
>WE WUZ
Ok, Mahmoud.
>log all file access and put in this file
Okay chief!
>Accessed pagefile
>Accessed log.txt
>Accessed log.txt
>Accessed log.txt
>Accessed log.txt
>Accessed log.txt
>>54816507
DUMB
ANIME
POSTER