Blogs about: Audting
Featured Blog
Audit Account Logon vs Audit Logon/Logoff
Over the past several years I’ve been explaining the diffence between these two audit polices. One is for logon/logoff events the other (Account Logon) is for authentication events. In the pas… more →
Event Log Managment
Audit Account Logon vs Audit Logon/Logoff
ithompson wrote 1 month ago: Over the past several years I’ve been explaining the diffence between these two audit polices. … more →
Monitoring Network Shares
ithompson wrote 6 months ago: I had a discussion today with a customer who was trying to monitor when their users tried to access … more →
Detecting Insider Threats
ithompson wrote 7 months ago: Over the last few weeks I have been putting together a whitepaper on detecting insider threats (on a … more →
Password Never Expires and Account Set to Expire
ithompson wrote 9 months ago: Recently I was asked, “What type of user account changes do you watch for?” There are several but I … more →
Webinar hosted by Whitehatworld
ithompson wrote 9 months ago: The other day I conducted a webinar that was hosted by Whitehatworld.com. I have been asked by seve … more →
Why you should disable accounts
ithompson wrote 1 year ago: Why do companies in this day and age continue to leave employee’s system accounts active after the e … more →
Data Leakage with USB Devices
ithompson wrote 1 year ago: If you think that your users would never steal any data from the company then take a look at these 3 … more →
Windows Logon Types
ithompson wrote 1 year ago: I have received several requests asking what the different Logon Types are for the different Windows … more →
Windows 2008 and Vista Events
ithompson wrote 1 year ago: Big thanks to Eric Fitzgerald for posting some good info about the W2k8 and Vista events. He put 2 g … more →
Auditing Drive Mappings
ithompson wrote 1 year ago: Windows does not track drive mappings for auditing out of the box. To audit drive mappings you will … more →
Tracking Down Audit Policy Changes
ithompson wrote 1 year ago: Yesterday I held a webinar about how to track down changes to your Audit Policy. I have had several … more →
