跳转到主内容

当通过 Windows 客户端移动文件或文件夹时,将报告哪些活动类型?

Views:
257
Visibility:
Public
Votes:
0
Category:
data-infrastructure-insights
Specialty:
om
Last Updated:

适用于

  • Cloud Insights 存储工作负载安全
  • 监控 CIFS 访问

回答

所有活动在 Workload Security 的取证屏幕中报告活动:
  • 移动文件:
    • 在同一共享中: 重命名读取 更改权限
    • 不同共享之间:删除创建
  • 移动文件夹:
    • 在同一共享内: 
      • 要移动的文件夹:重命名更改权限
      • 文件夹中包含的文件:读取更改权限
      • 文件夹中包含的子文件夹:未报告
    • 不同共享之间:
      • 要移动的文件夹:删除创建
      • 文件夹中包含的文件:删除创建写入读取
      • 文件夹中包含的子文件夹:删除创建

注意:
Change Permission 可能不会根据 Windows 客户端的缓存状态进行报告。

权限可能会受到影响,并且在使用 Windows File Recovery 还原文件和文件夹时不会报告。

追加信息

追加信息_text
NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.