Zen 2.0

Enterprises will spend $330 million on security event management (SEM) solutions this year and will spend $800 million on the technology by 2008, according to research firm Yankee Group.

SEM Market

My article on Five tips for building log management infrastructures is now posted on Computerworld.

Five mistakes of incident response
Anton Chuvakin of netForensics cites examples of where companies go wrong after they’ve been targets of computer attacks.

Another Look at Log Files
The ideal log analysis tool would alert you to unauthorized or unusual activity. But how does a computer know what’s unauthorized or unusual?

LoGS is a rule-based log analysis engine which attempts to address some of the short-comings of other freely available tools.

LoGS can be obtained at:
http://www.hpc.unm.edu/~download/LoGS/

Ten questions about Sarbanes-Oxley compliance
Can you or your CEO answer these questions on the Sarbanes-Oxley Act? Knowing the answers and following through could keep your company on solid ground and your CEO on the job.

A very interesting article on Windows Logon Type codes. It is extremely useful when you need to analyze your Windows logon logs to find out what’s happening.

Logon type codes revealed
The logon/logoff category of the Windows security log gives you the ability to monitor all attempts to access the local computer. This article examines each logon type and shows how some other fields in Logon/Logoff events can be helpful for understanding the nature of a given logon attempt.