Scan your security event log online

Check for high security events happening on your machine, such as users logging on to your machine, accesses to important files on your machine, failed logon attempts, security policy changes to your machine, and more! Use EventLogScan to check that your system is truly secure!

How it works

EventLogScan will install an ActiveX control on your machine and analyse all the events in your security event log. After the analysis, it will present you with an HTML report (sample) with all the critical, high and medium security events found and a brief explanation of each. To perform the scan, you must download the ActiveX control to your machine. You will be prompted to download the EventLogScan Service ActiveX Control. Select "Yes" to download and start the test.

Requirements for the test

Windows NT, 2000 or XP as operating system.

**Not** Windows 9X or ME! How to check your OS version ?

type at the run command :winver

Auditing must be switched on. How to check if auditing is switched on & how to switch it on

You must have rights and privileges to access the security log on your machine. How to check whether you can access the security log

Internet Explorer 4 or later

with the Internet security settings set to Medium. How to check/set your IE settings


Legal information

that seems useful to administrators on the go, but how would one do it indepdently without the need to use a 3rd party server [other than to setup their owns ids or something in that nature]

Thx ComSec for this Tool , I think it will help me to track some strange event that are running on my Pc this last week , eg my tftp.exe run itself .... Maybe I was hacked but with this I could analyse what my computer is doing ... ;:)

Thx

To scan ur event logs without 3rd party programs (XP only). Goto control panel, then administrative tools, then event viewer. Click on the security tab and then it will show u ur security logs.

nice site.

...if you are realy paranoid you could implement syslog protocol in m$ windows or instal snort.

On the topic of Even Viewer,

www.eventid.net

Use that site when you have an error in your event log that you dont know what it is, what caused it, etc, just get the Event ID and type it into the inputbox at eventid.net's front page.