Skip to content

Glossary: Hardening, Firewalls and Intrusion Detection

File auditing

Also written: access auditing, auditing entry

A Windows setting that records each access to a chosen file or folder in the Security log, with the account name. Alex turns it on for a honeyfile so that any opening writes event 4663 and raises an alert.

Where the book teaches it

Related terms

HoneyfileEvent ID