Hi,
I am testing Endpoint Security event capabilities and noticed that events such as ES_EVENT_TYPE_NOTIFY_OPEN do not notify the client about file access events that were denied because of folder permission issues (i.e. Error: Permission denied (no read or write access)) or because the file did not exist (i.e. Error: No such file or directory). Is there a way to be notify about such file access events?
We would like to be able to be notified about attempt to check content of unauthorized folder even if the file the process tried to open did not exist.
Thank you
I am testing Endpoint Security event capabilities and noticed that events such as ES_EVENT_TYPE_NOTIFY_OPEN do not notify the client about file access events that were denied because of folder permission issues (i.e. Error: Permission denied (no read or write access)) or because the file did not exist (i.e. Error: No such file or directory). Is there a way to be notify about such file access events?
We would like to be able to be notified about attempt to check content of unauthorized folder even if the file the process tried to open did not exist.
Thank you