ShareWatcher is a server security and automation tool that monitors Windows file shares and FTP servers, tracking file access and changes in real time and triggering alerts or automated workflows.
What is ShareWatcher?
ShareWatcher is a Windows-based monitoring utility from CodeLine that watches local and remote Windows file shares and FTP servers. It detects who accesses shared files and when files are added, deleted, or modified, then logs those events and can send real-time alerts via email, sound notifications, or Windows Event Logs. It also supports triggering custom scripts and using the QuickMove feature to automatically relocate new files. The tool runs on Windows and is designed for network administrators and security-conscious users.
What makes ShareWatcher stand out?
- User Access Tracking — Know exactly who is opening or modifying your Windows file shares, with detailed logs of each access event.
- File Change Detection — Monitor for files being added, deleted, or modified on both local/remote Windows shares and FTP servers (new files only on FTP).
- Multi-Channel Alerts — Receive instant notifications through email, sound playback, custom command execution, or Windows Event Log entries when changes are detected.
- QuickMove Automation — Automatically relocate newly arrived files to a destination folder using the integrated QuickMove feature, streamlining file intake workflows.
- Custom Script Triggers — Launch any script or executable in response to file events, enabling integration with existing automation pipelines.
Who should use ShareWatcher?
- Network administrators — Monitor shared folders across a LAN to audit file access and detect unauthorized changes.
- IT security teams — Track sensitive data access on Windows file servers and FTP servers, and receive immediate alerts for suspicious activity.
- Business users managing file intake — Automatically move incoming files (e.g., from FTP drop-off folders) to designated processing directories using the QuickMove action.
Use cases
- Audit file share access — Deploy ShareWatcher on a file server to log every user who opens, modifies, or deletes files, with exportable logs for compliance reporting.
- Automate file relocation — Place ShareWatcher on a folder where clients upload files via FTP; new files are instantly moved to a workflow folder using the QuickMove feature.
- Real-time change alerts — Configure email or sound alerts to stay informed the moment a critical document is modified or a shared folder is accessed.
How does it work?
ShareWatcher runs as a Windows application. You select one or more local or remote file shares (or an FTP server), define which events to watch (additions, deletions, modifications, access), and choose alert actions (email, sound, script, event log). The tool continuously monitors the file system and triggers the configured responses when a matching event occurs. QuickMove can be set to automatically copy or move new files to another folder.
