Re: RE: FW/IPS log correlation software

[ratnachkumar () gmail com]

You can use Log parser from Microsoft to correlate the event and identify suspicious events.

This is a manual job. You have to write intelligent queries to detect events of your interest
or
you can buy some commercial tool to do it for you