auditing files

Martin ( (no email) )
Tue, 14 Jul 1998 16:57:06 -0400

I am going nuts trying to figure out who is deleting certain files on one=
of our servers. The event view/security log just tells me who logged in=
and shows successful or failed audits.

Where do I start?

I had 80% of a directory disappear today. No one knows who did it. Thank=
god we had it mirrored via octopus. Where do I look to find the culprit?