Investigate about delete file

[webstyler]

Hi

What's the best way to investigate about "delete" of file..

How to check what user have deleted and how (cpanel/ftp/..) ?

Thanks

[cPanelDavidG]

Hi

What's the best way to investigate about "delete" of file..

How to check what user have deleted and how (cpanel/ftp/..) ?

Thanks

Log files are a good place to start.

For FTP: /var/log/xferlog and /var/log/messages

For cPanel: /usr/local/cpanel/logs/access_log (see what pages they viewed such as File Manager) and /usr/local/cpanel/logs/login_log (see if they logged into cPanel)

[webstyler]

/var/log/xferlog is empty
/var/log/messages start from 22 feb. ..

/usr/local/cpanel/logs/login_log is empty

:/

tx