Penetration Testing mailing list archives

RE: Deleting logs under win2000


From: "Ricci @ ismart" <ricci () ismart net>
Date: Tue, 18 Sep 2001 11:04:41 +0800

Hello All,

        In addition to deleting the entire log, is there any tools that can remove
particular entries in the NT Event logs?

        How about the IIS Logs? Is there any tools that can remove particular
entries in IIS Logs?

        If that's the case, then what can be used as the trustable evidence in the
Windows NT? Is that no logs could be used as digital evidence if the log is
not kept in the other machines?

        Thanks.

Ricci

-----Original Message-----
From: Goki Net [mailto:goki10 () hotmail com]
Sent: Friday, September 14, 2001 9:21 PM
To: PEN-TEST () securityfocus com
Subject: Deleting logs under win2000


Are there any tools{command line} for deleting logs under win2000 on a
compromised machine

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


Current thread: