Skip to main content
Answer

File activity anomaly

  • December 23, 2021
  • 3 replies
  • 181 views

Hi All
 
i got alert from File Activity Anomaly that large amount of file were deleted and modified.
Also i wanted to know if suppose if there is any security changes granted by an admin or by a group policy to a file/s so will that be considered as a counter tick under modification.

Best answer by dude

@RohitR we have other threads here that discussed this exact same topic. Take a look 

 

There are links in those threads that will point you to the report and how to analyze the data that is being reported.

3 replies

Forum|alt.badge.img+2
  • Novice
  • December 23, 2021

Hey Rohit,

 

Does the alert show you which files were modified ? Are you able to use the unusual file activity report in Commvault webconsole? Did you have a specific question about the alert ? 

 

Regarding your question on modified files, CVsupport was able to help me find a way to measure it. However, I cant recollect it now. 


dude
Community All Star
Forum|alt.badge.img+15
  • Community All Star
  • Answer
  • December 23, 2021

@RohitR we have other threads here that discussed this exact same topic. Take a look 

 

There are links in those threads that will point you to the report and how to analyze the data that is being reported.


Forum|alt.badge.img
  • Vaulter
  • December 27, 2021

Hi @RohitR ,

ACL changes on the files are also tracked under file modifications. From FR23, you should be able to view the path information on Command Center.

Thanks,

Shyam