Browse by Tags

All Tags » Previews   (RSS)
Vista security events get noticed
18 April 07 12:53 PM | Eric Fitzgerald | 4 Comments   
Doriansoft noticed that there's a relationship between our pre-Vista security event IDs and our Vista-era security event IDs. For most security events: VistaEventId = PreVistaEventId + 4096 Why is this? We needed to differentiate the Vista events from Read More...
Filed under:
Quick Overview of Object Access Auditing in Windows
07 March 06 02:16 PM | Eric Fitzgerald | 1 Comments   
A lot of people are unhappy with object access auditing on Windows, because what they want to know is "who touched the object and what did that person do", but what Windows auditing tells you is actually "who touched the object and what did they ask for Read More...
Filed under: , ,
Whetting your appetite for Windows Vista
20 December 05 05:19 PM | Eric Fitzgerald | 0 Comments   
Here's a cut & paste from one of my Vista machines. This is one of our new events. I'm including the human-formatted view which you'll see in Event Viewer, and the XML view that apps will see (you can see this in the Viewer, too, if you're into that). Read More...
Filed under:
Page view tracker