RE: Deleting logs under win2000

From: Oliver Karow (Oliver.Karowat_private)
Date: Wed Sep 19 2001 - 14:27:57 PDT

  • Next message: olle: "Re: L0phtcrack"

    Hi,
    
    
    At 11:04 18.09.2001 +0800, Ricci @ ismart wrote:
    >Hello All,
    >
    >         In addition to deleting the entire log, is there any tools that 
    > can remove
    >particular entries in the NT Event logs?
    
    
    have a look at http://www.ntsecurity.nu/toolbox/winzapper/
    
    
    
    >         How about the IIS Logs? Is there any tools that can remove particular
    >entries in IIS Logs?
    >
    >         If that's the case, then what can be used as the trustable 
    > evidence in the
    >Windows NT? Is that no logs could be used as digital evidence if the log is
    >not kept in the other machines?
    >
    >         Thanks.
    
    You should always use a remote loghost for logging! Independent from the 
    platform or application you are using.
    
    
    
    
    >Ricci
    >
    >-----Original Message-----
    >From: Goki Net [mailto:goki10at_private]
    >Sent: Friday, September 14, 2001 9:21 PM
    >To: PEN-TESTat_private
    >Subject: Deleting logs under win2000
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Wed Sep 19 2001 - 17:38:13 PDT