Harlan perhaps one of these will help; http://www.microsoft.com/msj/defaultframe.asp?page=/msj/1099/journal2/journal2.htm&nav=/msj/1099/newnav.htm http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnfiles/html/ntfs5.asp http://netez.com/2xExplorer/shellFAQ/bas_xplore.html http://msdn.microsoft.com/library/default.asp?url=/library/en-us/fileio/base/fsctl_enum_usn_data.asp http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/winxppro/proddocs/fsutil_usn.asp hope something here helps, perhaps #1 farmerdude On Fri, 2003-03-14 at 14:09, Harlan Carvey wrote: > I'm looking for an app that allows the user to > enumerate the NTFS change journal on a live Win2K > system. > > Does anyone know of anything? > > > > > ===== > ------------------------------------------------------------------------ > Harlan Carvey > Computer Security Administrator > AIM: carvdawg > Yahoo: keydet89 > ------------------------------------------------------------------------ > > __________________________________________________ > Do you Yahoo!? > Yahoo! Web Hosting - establish your business online > http://webhosting.yahoo.com > > ----------------------------------------------------------------- > This list is provided by the SecurityFocus ARIS analyzer service. > For more information on this free incident handling, management > and tracking system please see: http://aris.securityfocus.com > ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Sun Mar 16 2003 - 17:29:36 PST