[Dshield] Parsing IIS Logs Themselves?
Johannes B. Ullrich
jullrich at euclidian.com
Sat Aug 11 02:32:17 GMT 2001
> Is there a way to process the IIS logs directly? I see log submitting
> options for a lot of formats, but none of them seem to work with the
> current IIS logs. Since those are the machines being effected, wouldn't
> it be smart to accept those logs directly?
jullrich at sans.org Join http://www.DShield.org
Distributed Intrusion Detection System
More information about the list