RE: Net Send popup in Event Viewer

["Keith A. Pachulski, PPS, GCIH, GCFW" <keithp () protectors cc>]

do you have a firewall on your border doing any kind of session auditing
[while the firewall should be blocking this if for some reason you have this
permitted and the firewall is logging inbound sessions that is one way to
determine the source]; the second of course would be a network IDS box
logging the inbound sessions..

Keith

----------------------------------------------------------------------------

Need live assistance with a security issue now? http://www.keen.com/StrmShdw


-----Original Message-----
From: DeBerry, Casey [mailto:Casey.DeBerry () trizetto com]
Sent: Friday, May 02, 2003 4:15 PM
To: Security-Basics (E-mail)
Subject: Net Send popup in Event Viewer


Event viewer has an event of :

Applicatiop popup:  Hello:  We are watching you


Are there any means of tracking the source of this net send msg?  This is an
MS Windows 2000 box.

---------------------------------------------------------------------------
FastTrain has your solution for a great CISSP Boot Camp. The industry's most
recognized corporate security certification track, provides a comprehensive
prospectus based upon the core principle concepts of security. This ALL
INCLUSIVE curriculum utilizes lectures, case studies and true hands-on
utilization
of pertinent security tools. For a limited time you can enter for a chance
to win one of the latest technological innovations, the SEGWAY HT.
Log onto http://www.securityfocus.com/FastTrain-security-basics
----------------------------------------------------------------------------


---------------------------------------------------------------------------
FastTrain has your solution for a great CISSP Boot Camp. The industry's most 
recognized corporate security certification track, provides a comprehensive 
prospectus based upon the core principle concepts of security. This ALL INCLUSIVE curriculum utilizes lectures, case 
studies and true hands-on utilization 
of pertinent security tools. For a limited time you can enter for a chance 
to win one of the latest technological innovations, the SEGWAY HT. 
Log onto http://www.securityfocus.com/FastTrain-security-basics 
----------------------------------------------------------------------------