How to view the occurrence of configured events in NTFS Change Auditor?


The Live Monitor is a powerful tool in NTFS Change Auditor that allows you to view the occurrence of all the Event IDs configured in Data Collection Settings in the application. This tool will notify you as soon as the Event ID is captured by NTFS Listener Service. The reported details include Event ID, Share/Folder/File Name, Host Name and Change Type.

To launch 'Live Monitor' window, click menu in the toolbar. The 'Live Monitor' window will appear as shown below: