We can audit deleted files, moved etc. Is there a way to audit file download from Datastore(s)
Hello,
Yes there is. Check out aac-lib/vli at master · Texiwill/aac-lib · GitHub which is a VMware vRealize LogInsight Content Pack that provides a Security Operations view of what happens within vSphere (vCenter + ESXi). There is a Datastore Browser dashboard to give you just this information. There is also other activity monitoring that will be of use.
Best regards,
Edward L. Haletky aka Texiwill
VMware Communities User Moderator, VMware vExpert 2009-2017
Virtualization and Cloud Security Analyst: TVP Strategy
Blue Gears Blog: vSphere Upgrade Saga
Podcast: Virtualization and Cloud Security Round Table Podcast
GitHub: https://github.com/Texiwill
Hello,
Yes there is. Check out aac-lib/vli at master · Texiwill/aac-lib · GitHub which is a VMware vRealize LogInsight Content Pack that provides a Security Operations view of what happens within vSphere (vCenter + ESXi). There is a Datastore Browser dashboard to give you just this information. There is also other activity monitoring that will be of use.
Best regards,
Edward L. Haletky aka Texiwill
VMware Communities User Moderator, VMware vExpert 2009-2017
Virtualization and Cloud Security Analyst: TVP Strategy
Blue Gears Blog: vSphere Upgrade Saga
Podcast: Virtualization and Cloud Security Round Table Podcast
GitHub: https://github.com/Texiwill