[Snort-sigs] MS Exchange rule

Wes Young wyoung at ...1639...
Wed Jul 23 13:50:04 EDT 2003


use the audit functionality in windows (lookup group policy)

not sure if you can find failed login stream. (havent looked this up, so double check me on it)

>>> "Kraus, Thorsten" <Thorsten.Kraus at ...1702...> 07/23 2:07 AM >>>
Hello NG,

does a rule exist, where I can log wrong logins to my Microsoft Exchange server?
Hop so!

Goodbye
Thorsten


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 
_______________________________________________
Snort-sigs mailing list
Snort-sigs at lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/snort-sigs





More information about the Snort-sigs mailing list