Difference between revisions of "Windows"
Jump to navigation
Jump to search
| Line 1: | Line 1: | ||
"Event Comb" from Microsoft | "Event Comb" from Microsoft | ||
| + | |||
| + | or | ||
| + | |||
| + | [url]http://www.microsoft.com/technet/security/guidance/secmod144.mspx[/url] | ||
| + | [url]http://www.sysinternals.com/ntw2k/freeware/psloglist.shtml[/url] -- PsLogList | ||
| + | [url]http://www.gfi.com/lanselm/[/url] -- LanGuard S.E.L.M. -- trial download | ||
| + | |||
| + | Audit Logon/Logoff success events. The logon (528/540) and logoff (538 | ||
| + | |||
| + | *[http://www.microsoft.com/technet/security/bestprac/bpent/sec3/monito.mspx events by ID at microsoft] | ||
Revision as of 13:28, 16 January 2006
"Event Comb" from Microsoft
or
[url]http://www.microsoft.com/technet/security/guidance/secmod144.mspx[/url] [url]http://www.sysinternals.com/ntw2k/freeware/psloglist.shtml[/url] -- PsLogList [url]http://www.gfi.com/lanselm/[/url] -- LanGuard S.E.L.M. -- trial download
Audit Logon/Logoff success events. The logon (528/540) and logoff (538
