|
Deciphering Account Logon Events |
|
Sunday, 07 August 2005
by Michel Roth
|
|
"One of the most common questions that I get about Windows Auditing "is, how come you guys were so @#%! stupid that you put into logon categories? The answer is actually pretty simple- we're bad at choosing names. "Account Logon" isn't really about logon, it's about credential validation. Here's the low down on what is the difference between Logon/Logoff and Account Logon events, and how to decipher Account Logon events."
Read more here.
|
