Difference between revisions of "Windows"
Jump to navigation
Jump to search
| Line 1: | Line 1: | ||
| + | *[http://www.microsoft.com/technet/archive/community/columns/security/askus/aus1101.mspx Microsoft about Auditing] | ||
| + | |||
"Event Comb" from Microsoft | "Event Comb" from Microsoft | ||
Revision as of 14:50, 16 January 2006
"Event Comb" from Microsoft
or
[url]http://www.microsoft.com/technet/security/guidance/secmod144.mspx[/url] [url]http://www.sysinternals.com/ntw2k/freeware/psloglist.shtml[/url] -- PsLogList [url]http://www.gfi.com/lanselm/[/url] -- LanGuard S.E.L.M. -- trial download
Audit Logon/Logoff success events. The logon (528/540) and logoff (538