Hello all, I am new to audit Windows NT. Can you tell me how to investigate Windows NT to know those abnormal things? Is there any document about decoding NT event information? Thanks. John Li - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.]
