Penetration Testing mailing list archives

Re: Windows event logging


From: Makoto Shiotsuki <shio () st rim or jp>
Date: Wed, 13 Jun 2001 12:55:24 +0900


does anyone know where I can obtain
a complete list of Windows Event Identifiers?

Try GrepMsgTbl.
http://www-rnks.informatik.tu-cottbus.de/~fsch/english/res.htm

You can list all security event ids and messages by;

  grepmsgtbl %SystemRoot%\System32\MsAuditE.dll

Makoto Shiotsuki


Current thread: