Re: What does this mean??? Event Log Scan

["J. Lambrecht" <joris.lambrecht () pandora be>]

Well, you've configured Auditing in the user manager to Audit even while
there are succesfull actions, as such you get to see ALL activity wich has
been selected for auditing. The Failure entry's are something else, these
could indicate attempted abuse or indicate you've failed to enter your
password correctly.

----- Original Message ----- 
From: "Chance Orr" <karismau () yahoo com>
To: <security-basics () securityfocus com>
Sent: Thursday, July 31, 2003 6:41 AM
Subject: What does this mean??? Event Log Scan




07/30/2003  23:49:02  612 Audit Policy Change Success audit Critical
Security SYSTEM xxxxxxxxxx
07/30/2003  23:49:02  540 Successful Network Logon Success audit Critical
Security ANONYMOUS LOGON xxxxxxxxxx
07/30/2003  23:49:24  680 Account Used for Logon Failure audit Critical
Security SYSTEM xxxxxxxxxx
07/30/2003  23:49:24  529 LF: Bad user name/password Failure audit
Critical Security SYSTEM xxxxxxxxxx
07/30/2003  23:49:33  680 Account Used for Logon Success audit Critical
Security SYSTEM xxxxxxxxxx

This appears in my event log everytime I start my pc. I am using a
firewall & XP-Home

thanx

---------------------------------------------------------------------------
----------------------------------------------------------------------------




---------------------------------------------------------------------------
----------------------------------------------------------------------------