Hi,
to be exact I am trying to analyze this type of log files.(File Server & Windows CPRS Log)
Level Date and Time Source Event ID Task Category
Information 10-Feb-15 11:02:17 AM Microsoft-Windows-Security-Auditing 4780 User Account Management "The ACL was set on accounts which are members of administrators groups.
Subject:
Security ID: ANONYMOUS LOGON
Account Name: ANONYMOUS LOGON
Account Domain: NT AUTHORITY
Logon ID: 0x3e6
Target Account:
Security ID: CISCODOMAIN\IS Account Operators
Account Name: IS Account Operators
Account Domain: DC=ciscodomain,DC=local
Any advise?
... View more