Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security ISSForum
[Top] [All Lists]

RE: [ISSForum] Site Protector tools

Subject: RE: [ISSForum] Site Protector tools
Date: Fri, 15 Oct 2004 14:09:44 +0100
Jose,

The only thing stored in the database is the audit trail, but not actual
sessions. You might be able to query the audit trail like this:

SELECT
        ADT.AuditTrailID, ADT.AuditTime, ADT.Username, ADC.EventDesc,
ADI.ParamName, ADI.ParamValue
        from AuditTrail as ADT
JOIN AuditInfo as ADI
        on ADT.AuditTrailID = ADI.AuditTrailID
JOIN AuditEventCMD as ADC
        on ADT.AuditEventCMDID = ADC.AuditEventCMDID
-- AuditEventCMDID 5 = console login, 6 = console logout
WHERE ADT.AuditEventCMDID IN (5, 6)


Cheers,
Robert

-----Original Message-----
From: issforum-bounces@iss.net [mailto:issforum-bounces@iss.net] 
Sent: 23 September 2004 14:51
To: issforum@iss.net
Subject: [ISSForum] Site Protector tools

Does anyone have a website that provide useful tools to query
information from the Site Protector DB.  I'm looking for a tool that
will provide the list of userids currently logged on and using Site
Protector console.
 
thanks in advanced!!


Jose Morales
mailto:mavenusa@yahoo.com
_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.

_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 
6303 Barfield Road, Atlanta, Georgia, USA 30328.

<Prev in Thread] Current Thread [Next in Thread>