Having said this, may I suggest that even if it did work, monitoring an
entire drive partition is probably not a good idea, because
1.  there could be thousands of temp files or very large log files that does
not make sense to monitor
2.  they would cause syscheck to take a log time to finish scanning.
3.  syscheck will then generate a lot of noise and someone will end up
ignoring all the alerts anyway.

It is better if you are able to configure syscheck to monitor specific
directories.


On Wed, Jul 13, 2011 at 3:14 PM, Christopher Moraes
<[email protected]>wrote:

> Maybe creating a link will work.  I mean create a link (using mklink or
> linkd) as
> c:\entireDdrive  --linked to-->  D:\
>
> and try to monitor c:\entireDdrive.
>
> I haven't tried this, so I'm not sure it'll work.
>
>

Reply via email to