White paper on event logging

[Steve-A]

I was told there was someone type of White Paper from Microsoft with some
recommendations on the "typical" events that should be logged for good
security management. Does anyone have a clue if this exists and where it
might be? I have been searching various area without success. I did find
the "Security Monitoring and Attack Detection Guide" and will look that over.

 

[CiPh3rT3kSt]

These two sites should give you a start.

http://www.microsoft.com/technet/security/prodtech/windowsxp.mspx

http://www.microsoft.com/technet/security/prodtech/windowsxp/secwinxp/xpsgch01.mspx

Good Luck!
--
CiPh3rT3kSt
MCSE: Security 2003, CCNA, Security+


"Steve-A" wrote:

> I was told there was someone type of White Paper from Microsoft with some
> recommendations on the "typical" events that should be logged for good
> security management. Does anyone have a clue if this exists and where it
> might be? I have been searching various area without success. I did find
> the "Security Monitoring and Attack Detection Guide" and will look that over.