How to find users who deleted files in Synology NAS

File servers typically contain all the sensitive information of an organization. Since they are network attached, several users have access to these servers.Even if permissions have been set for users, file server activities have to be constantly monitored because they are prime targets for malicious insiders. Synology NAS filers can be audited by its native tools such as Log Center. An admin would have to read through entire log files provided by the Log Center to identify any event that could be a potential threat.

ADAudit Plus, however, provides a more easier solution by processing logs from the Synology NAS log center and generating comprehensive reports about file modifications. The reports provide information regarding the user who initiated the action, the system from which it was done, the time stamp and so on. This article compares the methods of monitoring file modifications using Synology's native tools and using ADAudit Plus.