March 2011

Here’s a colletion of information on how to configure auditing for various systems:

http://publib.boulder.ibm.com/infocenter/tivihelp/v2r1/topic/com.ibm.itcim.doc/tcim85_install100.html#wq229

[seen here: http://www.immutablesecurity.com/index.php/2011/03/23/how-to-configure-auditing-for-dozens-of-enterprise-systems/]

[source: http://computer-forensics.sans.org/blog/2011/03/17/digital-forensics-case-leads-file-systems-memory-forensics-pedophile-takedown]

Post to oss-sec mailing list regarding security of ldd:

http://seclists.org/oss-sec/2011/q1/421

Here’s a nice blog post with a list of resources of documentation of the Windows Security Event Log:

http://www.immutablesecurity.com/index.php/2011/03/05/every-windows-security-event-log-documented