Re: [PEN-TEST] Audit package

[Frank Heyne <fh () Rcs1 urz tu-dresden de>]

On 27 Sep 2000, at 11:04, Michael Graham wrote:

> Does anyone know of a package/application that uses the info created in the
> Audit log of say NT or UNIX and enables administrators to drill down and get
> info about users'

For NT these tools are quite useful:
If you want to know which user did run which program, R592.exe will help.
If you want to know when a user was logged on R528.exe will help.
If you want to get a list of denied logon attempts, R529.exe will help.

All these tools (and more) are available from http://www.heysoft.de






Frank Heyne