Re: Analysing Windows Syslogs

["Ken Pedigo" <kpedigo () gmail com>]

Here is a document from Microsoft that you might find what you are looking for.
http://www.rippletech.com/PDF/New/SOX/Auditing%20Best%20Practices.pdf

Microsoft also has a tool that you can pull events from multiple computers.
http://www.microsoft.com/technet/security/topics/auditingandmonitoring/securitymonitoring/smpgch02.mspx

Ken


On 7/31/06, Nicolas Malbranche <nmalbranche () net2s com> wrote:
> http://eventid.net/ is a great resource to troubleshoot any windows events.
> The yearly subscription is fairly cheap too. And I'm not affiliated in any
> way with them.
>
>
> >-----Original Message-----
> >From: Pravin Jayakumar [mailto:pravinjay () gmail com]
> >Sent: Sunday, July 30, 2006 11:20 AM
> >To: security-basics () securityfocus com
> >Subject: Analysing Windows Syslogs
> >
> >Hello List,
> >
> >Firstly, please excuse my bad english. Kindly let me know if
> >there is any document available for analysing the windows logs
> >(Application,System and Security) with the given event id?
> >
> >Is there any website which contains the info abt all the event id's.
> >
> >I could'nt find the info in http://go.microsoft.com/fwlink/
> >
> >Any help would be highly appreciated.
> >
> >Regards....
>
>
> ---------------------------------------------------------------------------
> This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The NSA has designated Norwich University a center of Academic Excellence
> in Information Security. Our program offers unparalleled Infosec management
> education and the case study affords you unmatched consulting experience.
> Using interactive e-Learning technology, you can earn this esteemed degree,
> without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------------

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------