How to Detect Who Deleted a File on Your SharePoint

Introduction The deletion of a file on your SharePoint by outsiders or internal users could result in the loss of sensitive data. That...

Introduction

The deletion of a file on your SharePoint by outsiders or internal users could result in the loss of sensitive data. That’s why the timely detection of file deletions on SharePoint minimizes hassles for users and reduces file restoration times, while providing an early warning of possible breaches.

http://start.netwrix.com/how_to_detect_who_deleted_file_on_sharepoint.html

Steps (4 total)

1

Activate Reporting

Navigate to Site Settings → Site Collection Administration → Site collection features → Choose “Reporting” → Press “Activate”.

2

Configure Collections Audit Settings

Navigate to Site Settings → Site Collection Administration → Site collection audit settings → Mark “Deleting or restoring items” → Click “OK”.

3

Open Audit Log Reports

Navigate to Site Settings → Site Collection Administration → Audit log reports → Deletions → Open the generated report in Microsoft Excel.

4

Real-Life Use Case Video

http://www.youtube.com/watch?v=LNwEkrxbNWc

References

• Netwrix Change Notifier Widget for Spiceworks
• Netwrix Auditor for SharePoint
• How to Detect Who Deleted a File on Your SharePoint