CA ControlMinder intercepts an event if the following two conditions are met:
For example, you can use the following generic rule to audit all file accesses to files that reside in c:\data\payroll:
newres FILE c:\data\payroll\*
You also need to make sure that the FILE class is active (the default).
Copyright © 2013 CA Technologies.
All rights reserved.
|
|