Forums: Scan Your Security Event Log Online - Forums

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Scan Your Security Event Log Online

#1 User is offline   Kenny 

  • Commander In Chief
  • Icon
  • Group: Admin
  • Posts: 6,447
  • Joined: 18-August 06

Posted 17 August 2003 - 05:00 PM

Scan your security event log online

Check for high security events happening on your machine, such as users logging on to your machine, accesses to important files on your machine, failed logon attempts, security policy changes to your machine, and more! Use EventLogScan to check that your system is truly secure!

How it works

EventLogScan will install an ActiveX control on your machine and analyse all the events in your security event log. After the analysis, it will present you with an HTML report (sample) with all the critical, high and medium security events found and a brief explanation of each. To perform the scan, you must download the ActiveX control to your machine. You will be prompted to download the EventLogScan Service ActiveX Control. Select "Yes" to download and start the test.

Requirements for the test

Windows NT, 2000 or XP as operating system.

**Not** Windows 9X or ME! How to check your OS version ?

type at the run command :winver

Auditing must be switched on. How to check if auditing is switched on & how to switch it on

You must have rights and privileges to access the security log on your machine. How to check whether you can access the security log

Internet Explorer 4 or later

with the Internet security settings set to Medium. How to check/set your IE settings


Legal information

Quote

The information found in this test is not retained or sold in any way by WindowSecurity.com. Warning: By clicking the "Scan my event logs!" button, you agree to let EventLogScan scan your security event logs and you also agree to hold WindowSecurity.com blameless and free of any liability for anything that happens as a result of the event log scan.


WindowSecurity

C
Kenny aka ComSec

Please read the Forum Rules !!!

Blog

" http://kaltech.blogspot.com/ "

______________________
0

#2 User is offline   dw-chow 

  • Private First Class
  • Icon
  • Group: Members
  • Posts: 127
  • Joined: 25-March 04

Posted 29 September 2004 - 09:49 AM

that seems useful to administrators on the go, but how would one do it indepdently without the need to use a 3rd party server [other than to setup their owns ids or something in that nature]
0

#3 Guest_Bedosman_*

  • Group: Guests

Posted 29 September 2004 - 11:38 AM

Thx ComSec for this Tool , I think it will help me to track some strange event that are running on my Pc this last week , eg my tftp.exe run itself .... Maybe I was hacked :angry: but with this I could analyse what my computer is doing ... ;:)

Thx :)
0

#4 User is offline   dlproof 

  • Private
  • Icon
  • Group: Members
  • Posts: 13
  • Joined: 22-June 05

Posted 27 June 2005 - 06:50 PM

To scan ur event logs without 3rd party programs (XP only). Goto control panel, then administrative tools, then event viewer. Click on the security tab and then it will show u ur security logs.
0

#5 User is offline   go0x 

  • Private
  • Icon
  • Group: Members
  • Posts: 9
  • Joined: 16-June 05

Posted 28 June 2005 - 04:14 AM

nice site.

...if you are realy paranoid you could implement syslog protocol in m$ windows or instal snort. :)
0

#6 User is offline   myth 

  • Master Sergeant
  • Icon
  • Group: Members
  • Posts: 408
  • Joined: 09-January 04

Posted 28 June 2005 - 04:57 AM

On the topic of Even Viewer,

www.eventid.net

Use that site when you have an error in your event log that you dont know what it is, what caused it, etc, just get the Event ID and type it into the inputbox at eventid.net's front page.
0

#7 User is offline   tanveer 

  • Private
  • Icon
  • Group: Members
  • Posts: 2
  • Joined: 03-January 06

Posted 06 January 2006 - 02:21 AM

Kenny L! It would be very helpfull for me. can you tell me from where i can download active x control to perform event scan.
0

#8 User is offline   packet 

  • Specialist
  • Icon
  • Group: Members
  • Posts: 628
  • Joined: 17-July 03

Posted 06 January 2006 - 06:39 AM

Tanveer, look very closely at his message and try to pick out the underlined link to the product, its near the bottom.

--P>G>>
Abusus non tolit usum
The gopher is back!
0

#9 User is offline   darksystem 

  • Private
  • Icon
  • Group: Members
  • Posts: 3
  • Joined: 28-January 08

Posted 02 February 2008 - 02:29 AM

thanks man good method to see your events logs!!





-----------------------
http://www.ahcrew.info --->Albanian Hackerz Crew!!!
0

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users

  • Share



Our Sponsors:


SwiftLayer Affiliate Web Hosting