Windows Security Logging and Other Esoterica

Browse by Tags

ACS' first bug from being too performant

We got several reports recently of a bug in ACS that certain DS Access events, primarily for dnsNode and dnsZone objects, don't properly get looked up. Some background: the event log in Windows prefers to log invariants such as message IDs, parameter Read More...

Posted Wednesday, July 16, 2008 10:48 AM by Eric Fitzgerald | 0 Comments

Filed under: News, ACS

Shameless Self-Promotion

There's one topic that I know is on everyone's mind- no, not American Idol - it's "What's new in Auditing in Windows Server 2008?" Well, funny that you brought that up. My friend Jesper Johanssen just wrote a new book, the Windows Server 2008 Security Read More...

Posted Wednesday, March 05, 2008 12:47 PM by Eric Fitzgerald | 1 Comments

Filed under: News, Tools

ACS Tidbits

Well there has been a lot happening on my old project, ACS (Audit Collection Services, a feature of SystemCenter Operations Manager 2007 ). Two more of our partners, Enterprise Certified and NetPro , have released compliance solutions on top of ACS. Another Read More...

Posted Friday, February 01, 2008 5:04 PM by Eric Fitzgerald | 1 Comments

Filed under: News, Tools

German court bans retention of logged IP addresses

A German court has ruled that a government web site may not retain IP addresses and other personally identifiable information (PII) in their logs for any longer than the user is actually using the site. The judges pointed out that in many cases it was Read More...

Posted Wednesday, October 03, 2007 10:53 AM by Eric Fitzgerald | 1 Comments

Filed under: News, Rants, Privacy, Laws

Ensuring that there's no useful data in your logs...

As I wrote about earlier, TorrentSpy, a file-sharing search engine, was ordered by a U.S. magistrate to enable logging on its servers and to subsequently make those logs available to the MPAA, the plaintiff in an illegal file-sharing lawsuit against TorrentSpy. Read More...

Posted Friday, August 31, 2007 2:23 PM by Eric Fitzgerald | 0 Comments

Filed under: News, Privacy, Laws

Voting Machine Logs + e-Government Laws = No Secrets When Voting

Researchers in the state of Ohio in the United States have discovered that by analyzing the logs produced (by law) from e-voting machines used in certain counties, they can determine the vote(s) each voter made . Further, the logs, by law, must be produced Read More...

Posted Wednesday, August 22, 2007 2:08 PM by Eric Fitzgerald | 0 Comments

Filed under: News, Rants

AT&T Team Up With Apple to Create Large-Scale Log Forwarding System Using Paper & US Postal Service

http://arstechnica.com/news.ars/post/20070811-iphone-bill-is-surprisingly-xbox-huge-lol.html Fortunately for customers they strip out all the interesting details that would make it useful to, well, anyone. Read More...

Posted Sunday, August 12, 2007 1:43 PM by Eric Fitzgerald | 1 Comments

Filed under: News, SEM

EZ-Pass Logs Used in Divorce Cases

This one kind of speaks for itself. I guess this is more of a privacy issue than a logging issue. http://wcbstv.com/topstories/local_story_222140553.html Read More...

Posted Friday, August 10, 2007 3:41 PM by Eric Fitzgerald | 2 Comments

Filed under: News, Privacy

Draft law in Germany may force telcos & ISPs to gather logs; Gmail Germany may shut down as a result

A draft law ( English translation ) being proposed in Germany to enforce the European Mandatory Data Retention Directive of 2006 would require telcos, ISPs, and email service providers to track and retain data necessary to trace and identify the source, Read More...

Posted Tuesday, June 26, 2007 4:26 PM by Eric Fitzgerald | 1 Comments

Filed under: News, Laws

Not generating logs is not an option... when you're under subpoena

Working as I do for a company that exists because of copyright, I'm not particularly sympathetic to TorrentSpy, a search engine company that is accused by the Motion Picture Association of America (MPAA) of helping to enable copyright infringement by Read More...

Posted Monday, June 11, 2007 2:10 PM by Eric Fitzgerald | 1 Comments

Filed under: News, Laws

We're #294!

Woohoo! Thank you all for helping push my humble prose into the limelight. Our little community is now in the top 10% of the most accessed blogs on MSDN. We'd probably be a lot higher if I got off my lazy behind and wrote more often. Anyway the monthly Read More...

Posted Thursday, February 08, 2007 6:06 PM by Eric Fitzgerald | 0 Comments

Filed under: News

A good 3rd-party reference to the Windows security event log

Randy Franklin Smith has a site with a very good reference to security event log events. Randy also does training on Windows security log analysis. Read More...

Posted Monday, March 20, 2006 11:31 AM by Eric Fitzgerald | 1 Comments

Filed under: Tips, News

EU Passes New Log Retention Rule for Telcos

The BBC reports that the European Parliament has approved rules, as an anti-terror measure, to require telephone companies to retain call and internet records for two years. I do not know if Windows-powered telephony switches exist, but even if they do Read More...