I'm fairly sure that 1 applies to domain logons and 2 applies to any other connection
that requires authentication. eg. accessing a shared folder.
-Original Message-
From: Michael Ungar [mailto:[EMAIL PROTECTED]
Sent: Sunday, 3 August 2003 3:42 PM
To: [EMAIL PROTECTED]
Subject: Windows 20
Check the Security log in Event Viewer. By default this is the only area that will
tell you who has logged in when. There are two points to remember here:
1. Account logon auditing must be enabled for success and failure. This should be
enabled at the domain level if your machine is on a domain.
I'm currently doing some research on enumeration tools for Windows operating systems.
I've heard of a very useful tool called Nete that is similar to enum but is
notoriously harder to find. I have done a search on Google and SecurityFocus but any
links I found do not work anymore. Does anyone on
