When you use Windows, performing file operations become second nature. Copy or delete a file and thinking nothing of it, carry on with your tasks. The problem arises when the file or folder you might be looking for isn’t where you thought it was. Perhaps you renamed it, moved it or accidentally deleted it. Maybe another person who also uses your computer like a relative has unwittingly done something with it.
A useful little utility to have around is Windows Explorer Tracker. What it does as the name suggests, is monitor a number of file operations in Windows Explorer, displays them in its window and records them in a log file. Things like deleting, renaming and creating files and folders is actively watched so you can go back and see what actions have been taking place.
Other useful features are the program will record when drives and storage media like USB sticks are inserted or removed, and you can also record file operations on a remote host by using the option to Map a network drive.
The program is pretty easy to set up and use, just download and install it. You will initially be greeted with a blank lower window until file operations in Explorer start to happen.
When the main window starts to collect data, it will give information such as;
Date and time of action
The action performed (delete, create, add, remove etc)
The object type being logged (file, folder, driver)
The path of the action
The original / new file name to log renaming
A quick tip: To get the file extension to display in the name columns such as .zip .exe, you need to have ‘Hide extensions for known file types’ unticked in the Explorer folder options. Open an Explorer window >> click on the ‘Organize’ menu >> click on ‘Folder and search options’ >> goto the ‘View’ tab >> untick ‘Hide extensions for known file types’.
To view any logs, click on ‘Manage log files’ and a window will open with folders split into year / month. Inside those folders, will be numbered log files corresponding to the day of the month so you can search through the log history for an exact day.
If you wish to view any previous history log in the program, simply click on ‘History’ and select the date range from the dropdown calendars.
Double clicking on a line or clicking ‘Detail View’ will bring up the selected file operation in an easier to read window. The arrows cycle through the current log line by line (<>) or go to the top / bottom of the displayed log (|<>|).
The ‘Options’ window is pretty light on content, only allowing for altering of the format for which to display the date and time in the log.
Overall, Windows Explorer Tracker is a very useful utility for keeping an eye on who, or what has been has been performing file operations on your own, or a networked system. It may not be as comprehensive as something like Sysinternals Process Monitor, but is good at what it does.
Compatible with Windows XP, Vista and 7 or higher, 32 and 64-bit.
Download Windows Explorer Tracker
Monitor File Operations with Windows Explorer Tracker is a post from: Raymond.CC Blog