58 reputation
5
bio website
location London, United Kingdom
age 37
visits member for 1 year, 3 months
seen Mar 20 at 11:34

Sysadmin and sometimes BOFH :)


Apr
10
comment Hard disk write-once mode on Windows
I've accepted this answer as it's the only one that even comes close to providing a proper solution, and was what ultimately led me to find NetApp SnapLock software, which works with NetApp's OS called 'Data ONTAP'.
Apr
10
awarded  Scholar
Apr
10
accepted Hard disk write-once mode on Windows
Apr
10
comment Hard disk write-once mode on Windows
@HopelessN00b As I said in my question, optical media isn't going to work for me
Apr
4
comment Hard disk write-once mode on Windows
@MihaiTodor That's not correct. NTFS does not update the Modified date parameter on every write - only when the file is closed after being written to. Logging applications typically keep the current log file open until it is ready to roll to the next log file (because opening and closing on every write would severely impact performance
Apr
1
comment Hard disk write-once mode on Windows
@Bryan interesting approach, but I expect to log up to 1GB per day. That'd take a lot of trees ;)
Apr
1
comment Hard disk write-once mode on Windows
@AlexP. could be insider or outsider that has managed to gain elevated access
Apr
1
comment Hard disk write-once mode on Windows
@AlexP. someone who might attempt to remove or alter log entries to cover up their tracks after an attack
Apr
1
comment Hard disk write-once mode on Windows
that all helps of course, but I'm looking for something more. Ideally I want to make the storage write-once.
Apr
1
comment Hard disk write-once mode on Windows
But how does that help to secure the logs on the remote log server?
Apr
1
comment Hard disk write-once mode on Windows
How does write-once not work with logs being appended? What I want is for the logs to be appended to, but not re-written
Apr
1
awarded  Student
Apr
1
asked Hard disk write-once mode on Windows
Mar
29
awarded  Suffrage
Mar
29
awarded  Supporter
Mar
28
awarded  Teacher
Mar
28
answered Where can I get sha1hexfltr?