Last night some needed files in our inetpub directory were removed. I need to know where these files went. Are there any kind of log files that could tell me if a certain user deleted the files?
Last night some needed files in our inetpub directory were removed. I need to know where these files went. Are there any kind of log files that could tell me if a certain user deleted the files?
Only if you enabled auditing of those files. If not then its anyone's guess. As Oakfan stated, restore from tape. When you restore them , enable auditing of those files.
If files wind up missing again, I'd suspect you may have a compromised server.
![[H]ard|Forum](/styles/hardforum/xenforo/logo_dark.png){kind=logo}