Log-Based Intrusion-Detection and Analysis in Windows Servers
Introduction - How to Perform Network-Wide Security Event Log Management
Microsoft Windows machines have basic audit facilities but they fall short of fulfilling real-life business needs(i.e., monitoring Windows computers in real-time, periodically analyzing security activity, and maintaining along-term audit trail). Therefore, the need exists for a log-based intrusion detection and analysis tool such asGFI EventsManager.
This paper explains how GFI EventsManager’s innovative architecture can fill the gapsin Windows’ security log functionality – without hurting performance and while remaining cost-effective. Itdiscusses the use of GFI EventsManager to implement best practice and fulfill due diligence requirementsimposed by auditors and regulatory agencies; and provides strategies for making maximum use of GFIEventsManager’s capabilities.
This white paper is no longer available by the vendor. To read similar interesting security articles, please visit our Security Articles section.
