Tmueller
Posts: 36
Score: 0
Joined: 4.Jan.2007
Status: offline
|
I use Tripwire to review file changes on all servers in conjunction with EventsManager. I recently upgraded to Eventsmanager 8.1 have been noticing that the following file changes hourly on the EventsManager server. I did not see this file change activity when I was using EventsManager 7.1. The file that is changing is: C:\WINDOWS\system32\msdbcrpt.kar.{7a4ef142-86a0-409d-ab1d-7e17d45357b9} (the numbers are random) Could someone please let me know the purpose of the file. Once I understand the purpose and reason it is changing, I can modify my rules in Tripwire to ignore it.
|