Windows NT Event Logging Book

Event logging is a facility used by computer systems to record the occurrence of significant events. An "event" is any change that occurs in a system -- for example, a user logon, an addition to a file, a change to a user's privileges, or an application program error. This book describes Windows NT event logging for three main audiences: For system administrators, using event logging as a tool for analyzing performance and troubleshooting system problems; includes the details of the system's Event Viewer. For Win 32 programmers, using the event logging API from C, Visual Basic 5, Perl 5 for Win32, Visual J++, C++/MFC (Microsoft Foundation Classes). Also describes how to localize the contents of the system's message files to create event log records in non-English languages. For security administrators, using event logging to specify and audit security-related events. Specifies the NT security auditing events and summarizes the specific security auditing requirements imposed on C2-level secure systems. The book comes with a CD-ROM containing examples from the book and many contributed event logging and auditing software packages.Read More