Someone moved directories and then deleted files on our Netware 6.5 sp6
server. Luckily I found the directories. Salvage, of course, was able to
get me the deleted files in question but not the directories themselves.

Is NSure the way to see who moved them in the first place? Its probably
the same person who then deleted the files but I want to make sure.

Is there an easier way to see who moved a file or directory?

Thanks in advance!