Security Basics mailing list archives

SQL Queries of Windows Event Logs


From: "Joe Quigley" <jquigley () iir-central com>
Date: Mon, 6 Jun 2005 13:38:48 -0400


Hello Everyone,

 
I've started importing all our windows event logs into a MSSQL database
and now need to write the queries for reporting. Since SQL is not my
strong point, I'd like to ask the list if anyone has seen (or would be
willing to share) a recommended set of reports/queries for tracking
potential security issues (failed logins, AD object changes, etc). 

Thanks in advance for any and all help,

Joe


Current thread: