I'm testing out File Sight Ultra right now, and I'm trying to understand what may specifically trigger "Read" logging. For instance, I've got a directory opened in Windows Explorer. Without even clicking on or hovering over any of the files, 2 out of 4 spreadsheet files show up in the logs as having been read. I can't figure out the logic. The files that are getting logged are files #2 and #4 in the list of files. They are all roughly the same size 84 and 83 KB. I've been tinkering with the file size threshhold to try to reduce extraneous activity getting logged.

Any pointers would be helpful. Ideally I would like only to log file reads when a file is opened. Thanks, Chris.

asked 28 Nov '12, 15:33

Chris's gravatar image

Chris
6112
accept rate: 0%


Hi Chris,

There is another way that you ignore alerts from File Explorer reading files. Go to the Ignore: Processes tab and select explorer.exe and save. Then whenever File Explorer views a file no alerts will be fired. I would also recommend that you select antivirus products as well to be ignored. Applications like these that read files will kick off the alerts and you may not want to get. More information about setting for PA File Sight.

Quinn

Don't forget to share your knowledge and insights by answering other forum questions. Also, please remember to mark the answer accepted when you questions are resolved.

link

answered 28 Nov '12, 16:52

Quinn's gravatar image

Quinn ♦♦
14.4k3925
accept rate: 35%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×4
×3

Asked: 28 Nov '12, 15:33

Seen: 4,704 times

Last updated: 28 Nov '12, 16:52