[Snort-sigs] MS Exchange rule

Wes Young wyoung at ...1639...
Wed Jul 23 13:50:04 EDT 2003

use the audit functionality in windows (lookup group policy)

not sure if you can find failed login stream. (havent looked this up, so double check me on it)

>>> "Kraus, Thorsten" <Thorsten.Kraus at ...1702...> 07/23 2:07 AM >>>
Hello NG,

does a rule exist, where I can log wrong logins to my Microsoft Exchange server?
Hop so!


This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
Snort-sigs mailing list
Snort-sigs at lists.sourceforge.net 

More information about the Snort-sigs mailing list