Re: log level settings

[tomasgermano () hotmail com]

For Windows security logs, you can use this tips:
http://www.ultimatewindowssecurity.com/encyclopedia.aspx

And for unix environment, I recomend SANS papers.
Of course, you can start monitoring auth event (syslog) and if you use sudo, configure it to loggin with syslog to.

interesting tools:
Snare client
logparser

bye

Tomas A Germano
Argentina