Hello everyone,
Since version 2608, we have received some feedback from our customers regarding the usability and visibility of certain file activity logs.
Based on this feedback, we would like to share a few points with you and get your thoughts on whether there are any additional configuration options or improvements that could help with these workflows.
-
File Tracing logs moved under Device Control Logs
With the removal of the separate File Tracing section and the consolidation of Device Control-related events under Device Control Logs, finding the relevant file activity has become more time-consuming.
File Tracing logs are among the logs our customers review most frequently. Previously, these events were easier to access and review directly. In the current version, users need to apply separate filters for each type of activity and review the results individually.
It would be very useful if multiple event types could be selected and filtered together, for example:
File Copy + File Delete + File Print
This would make investigation and daily log review significantly easier.
-
File Copy logs no longer show both source and destination paths
In the previous version, File Copy events showed both the source and destination paths.For example:
C:\Users\Faruk\Desktop\Test.docx → D:\Test.docxIn version 2608, we currently see only the source file path, for example:
C:\Users\Faruk\Desktop\Test.docxThe destination path is no longer displayed.
From an investigation and audit perspective, knowing where a file was copied from and where it was copied to is very important.
Additionally, for File Rename events, it would be more useful to display both the previous and the new file name. For example:
D:\Test.docx → D:\Test_new.docx
Could you also let us know if there is anything additional we can configure or do on our side regarding these points? We would also appreciate hearing your thoughts and recommendations on these behaviors.