find which user deleted particular folder that has full permission rwx to all users!!
how to find whether directory deleted is deleted by particular user???
i am using for testing purpose...
I have tested inotifywait tool but this doesnt find which user has deleted the folder or modified something...
i am using RHEL 6.0
any tool or technique!!!!
Last edited by diaablo2; 02-19-2014 at 06:52 PM.
|