Answer the question
In order to leave comments, you need to log in
How to log the actions of a user connected via SFTP in Windows?
Good afternoon.
At work, the SFTP server was reversed on WinSRV12R2 from the v8.1.0.0p1-Beta release git-hub repository . The root folder for SFTP is shared in the enterprise domain and its audit is configured. But there was a problem - the audit is conducted only if the user connects to this folder as a shared domain resource, but if the user is connected to the folder via SFTP, then no logs about his actions (delete, create, read) fall into the log.
Sshd_config is configured by default, i.e. SyslogFacility - AUTH and logs fall into the Windows log, not a text file; LogLevel - INFO. Thus, I log information about the user's connection via ssh, but I cannot log the changes made by him.
Can you tell me if this can be done and if so, how?
Thanks
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question