Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

RE: Integrating logs from PIX, IIS and WAS

Subject: RE: Integrating logs from PIX, IIS and WAS
Date: Fri, 28 Oct 2005 09:31:58 -0400
If you want more info on Log Parser, we published a book on it:

http://www.amazon.com/exec/obidos/tg/detail/-/1932266526/qid=1130505795/
sr=2-1/ref=pd_bbs_b_2_1/104-2058717-7732767?v=glance&s=books

-Andrew

-----Original Message-----
From: phunked up! [mailto:phunkodelic@gmail.com] 
Sent: Thursday, October 27, 2005 8:35 AM
To: Luis Angel Fernandez
Cc: security-basics@securityfocus.com
Subject: Re: Integrating logs from PIX, IIS and WAS

Go to www.logparser.com.  Use that with a back end database such as
MySQL or micorosft Sql (express is free) which will allow you to do
analysis of the logs.  I am also doing the same sort  of thing and am
using the above mentioned tools.

On 10/26/05, Luis Angel Fernandez <lafernandez@matchmind.es> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


   Hello,

   I am investigating about tools for integrate (store and analysis)
logs from different souces (Cisco PIX, IIS, WAS app server, syslog).
The
goal is be able of follow up a the behavior of a possible intruder
throught a scenario based on that products. Which is your method for
doing a forensic task like this? Which tools could help for this task?

   Regards.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iQCVAwUBQ1+eO3h5cEbo8TeiAQLOqAP8DctPlYwp31gbPVYeiKJoNOLVzmfXlE2T
xrH6fheN54odc8WY0VmyYWBTDwe2PDKJoq4ePcmshBjv5Nz5H/fkD746eajMxhwB
RYVnbNL4JoxE6nAMv8IR17yMEudFCE1bHE0dKAQFRl+veNUoxkZfR/LBkg2+/W9j
vXjxgrV8Aps=
=MRJ9
-----END PGP SIGNATURE-----



<Prev in Thread] Current Thread [Next in Thread>