Monthly Archives: August 2007

Information Security Policies

Back in July, The Trusted Toolkit Blog published a series of sample information security policies. They included: Introduction to Information Security Policy (7/3) Assess the business (7/5) Acceptable Use Policy (7/6) Account Management Policy (7/9) Administrator/Special Access Policy (7/10) Backup

Posted in Information Security, IT Management, IT Security, policies, Security

Top 11 Reasons to Look at, Collect, and Preserve Your Logs

Anton Chuvakin has followed up his Top 11 Reasons to Collect and Preserve Computer Logs with the Top 11 Reasons to Look at Your Logs.

Posted in IT Security, Log Management, logging, logs, Security, syslog

Windows Logging Tools

Back in July Anton Chuvakin posted a List of Utilized Windows Logging Tools which contains a link to a list of Windows logging tools on the Security Catalyst Community Forums. OSSEC was mentioned; one I haven’t yet looked into.

Posted in Log Management, logging, logs, Security, syslog, Windows

Internet Explorer 7 Security Whitepaper and Training Video

The Microsoft Internet Explorer Weblog just posted that Markellos Diorinos’ Tech-Net presentation, Windows Internet Explorer 7 Security In-Depth is available online. Also announced was the Internet Explorer Desktop Security Guide that discusses many of the new IE7 security features along with

Posted in IE7, Internet Explorer, IT Security, Microsoft, Security

How to Configure Granular Password Settings in Windows Server 2008 has published a two part article by Jakob H. Heidelberg on configuring granular password settings in Windows Server 2008. Part 1 is here and part 2 is here.

Posted in Information Security, IT Security, Security, Server 2003, Technology, Windows

Domain User Logon and Logoff Events

I had the need a few weeks ago to determine the logon and logoff times of users of our system. Fortunately we have the Windows server event logs captured. They are sent to a syslog server using NTsyslog and we created a basic

Posted in Active Directory, Information Security, IT Security, Log Management, logging, Microsoft, Security, syslog, Windows
August 2007
« Jun   Nov »