Del DeVries » Print » SecurityFocus HOME Infocus: Forensic Log Parsing with Microsoft’s LogParser

SecurityFocus HOME Infocus: Forensic Log Parsing with Microsoft’s LogParser

Posted By Del On June 16. 2004 @ 21:31 In tools | No Comments

Microsoft’s LogParser can be used for all types of server log files, including security event log, web and ftp logs, etc. ddv
[1] SecurityFocus HOME Infocus: Forensic Log Parsing with Microsoft’s LogParser: “Investigating a web-based intrusion can be a daunting task, especially when you have no information other than knowing it was web-based. It is easy to waste precious time digging through megabytes, perhaps even gigabytes, of log files trying to locate suspicious activity. Often this search turns up little useful evidence. “

Article printed from Del DeVries: http://blog.devriesonline.net

URL to article: http://blog.devriesonline.net/2004/06/16/securityfocus-home-infocus-forensic-log-parsing-with-microsofts-logparser/

URLs in this post:
[1] SecurityFocus HOME Infocus: Forensic Log Parsing with Microsoft’s LogParser: http://securityfocus.com/infocus/1712

Click here to print.