Re: Windows event auditing and reporting
- From: Phunkodelic <phunkodelic@xxxxxxxxx>
- Date: Tue, 4 Apr 2006 08:57:48 -0400
You may want to check out www.logparser.com. I used that as a "base"
and developed my own system. If you are comfy with VBscript you can
do alot with logparser. Great thing about it is its FREE.
Good luck.
On 4/3/06, rs <rsmade@xxxxxxxxx> wrote:
Can anyone recommend a good tool that will alert and report on Windows
Event logs, especially DC logs for events such as New user accounts,
changed user accounts, deleted user accounts, locked user accounts,
failed login attempts, expired passwords, dormant accounts, etc. We have
looked at both S.E.L.M from GFI (Reporting wasn't great) and Active
Administrator from ScriptLogic (Reporting was great but event criteria
was not customizable and it offers a ton of nice features that we don't
necessarily need but would be paying for.) . Just wanted to see if there
was anything else out there that someone could recommend?
---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------
---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------
- References:
- Windows event auditing and reporting
- From: rs
- Windows event auditing and reporting
- Prev by Date: Is portscanning legal? was Re: application for an employment
- Next by Date: RE: Windows event auditing and reporting
- Previous by thread: Windows event auditing and reporting
- Next by thread: Re: Windows event auditing and reporting
- Index(es):
Relevant Pages
|
