78 reputation
6
bio website
location London, United Kingdom
age 38
visits member for 1 year, 6 months
seen Sep 30 '13 at 10:17

Sysadmin and sometimes BOFH :)


Sep
24
awarded  Autobiographer
Feb
26
awarded  Popular Question
May
29
awarded  Nice Question
May
29
awarded  Scholar
May
29
comment How secure is the Windows event log, and how is it secured?
Thank you for answering the question! I get that if a machine is compromised that all bets are off, but I am rather surprised that it doesn't do more to secure the logs locally.
May
29
accepted How secure is the Windows event log, and how is it secured?
May
29
comment How secure is the Windows event log, and how is it secured?
I understand about how permissions and such come into play, and that remotely shipping the logs is sensible - but I still want to know what security or tamper-resistance mechanisms the Windows Event Log implements itself
May
29
comment How secure is the Windows event log, and how is it secured?
I believe Manage Engine's tamper-proof claim relates to all logs stored in their own archive format (which can come from more than just Windows event logs), and is not specific to Windows event logs. Their website indicated they include encryption, hashing and timestamping of archived files as security measures (any SIM/SIEM will do these, of course)
May
28
comment How secure is the Windows event log, and how is it secured?
I agree it's only as secure as the system it's running on - but I'd still like to know what security or tamper-resistance mechanisms the Windows Event Log implements
May
28
awarded  Supporter
May
28
awarded  Student
May
28
asked How secure is the Windows event log, and how is it secured?