Difference between revisions of "Windows"

From Mesopoly 3.0
Jump to navigation Jump to search
Line 1: Line 1:
 +
*[http://www.microsoft.com/technet/archive/community/columns/security/askus/aus1101.mspx Microsoft about Auditing]
 +
 
"Event Comb" from Microsoft
 
"Event Comb" from Microsoft
  

Revision as of 14:50, 16 January 2006

"Event Comb" from Microsoft

or

[url]http://www.microsoft.com/technet/security/guidance/secmod144.mspx[/url] [url]http://www.sysinternals.com/ntw2k/freeware/psloglist.shtml[/url] -- PsLogList [url]http://www.gfi.com/lanselm/[/url] -- LanGuard S.E.L.M. -- trial download

Audit Logon/Logoff success events. The logon (528/540) and logoff (538