Saturday, February 25, 2012

c2 failed login correlation to an origination IP/host ?

hey there
I wanted to know how people correlate a failed login attempt from within sql
logs or c2 logs and the origination address. I am thinking maybe people
looks at the events logs, but do those say what are the connections from
wich the failed loging started '
I am in a dillema !Hi
A guess... but can you link this into your firewall logs somethow?
John
"Simo Sentissi" wrote:

> hey there
> I wanted to know how people correlate a failed login attempt from within s
ql
> logs or c2 logs and the origination address. I am thinking maybe people
> looks at the events logs, but do those say what are the connections from
> wich the failed loging started '
> I am in a dillema !
>
>

No comments:

Post a Comment