• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

Login entry in event viewer

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Exploits // System Weaknesses

View previous topic :: View next topic  
Author Message
meethemant
Just Arrived
Just Arrived


Joined: 11 Sep 2008
Posts: 3
Location: Bangalore,India

Offline

PostPosted: Thu Jul 16, 2009 4:19 pm    Post subject: Login entry in event viewer Reply with quote

Hi

When i saw the security under event viewer i found that i have logged into this compter which is Domain controller also.

The details are as follows:-
1.Event ID 538 , Category Logon /Logoff & LogOn Type = 3
2.Event ID 576 , Category Logon /Logoff
3.Event ID 576 , Category Kerberos

But fact is that i have not logged into this computer.

help required !!

//best regards
Back to top
View user's profile Send private message
heba
Just Arrived
Just Arrived


Joined: 09 Jan 2006
Posts: 4
Location: Cremona (Italy)

Offline

PostPosted: Thu Jul 16, 2009 5:02 pm    Post subject: Reply with quote

hi,
if you don't login into that computer and it is client in a network try to view if the server see something in your log.
If the computer is not in a network try to view if an IPS view something.

If you are not, someone is, or the server that try to ping or control the client or some one else . I think
Back to top
View user's profile Send private message
meethemant
Just Arrived
Just Arrived


Joined: 11 Sep 2008
Posts: 3
Location: Bangalore,India

Offline

PostPosted: Tue Jul 21, 2009 6:41 am    Post subject: Reply with quote

heba wrote:
hi,
if you don't login into that computer and it is client in a network try to view if the server see something in your log.
If the computer is not in a network try to view if an IPS view something.

If you are not, someone is, or the server that try to ping or control the client or some one else . I think


Do you think that if i am doing logon /logoff in clients(X)then it will register this information in security of event viewer of domain controller(Y).

X & Y are the host names

//br
hks
Back to top
View user's profile Send private message
heba
Just Arrived
Just Arrived


Joined: 09 Jan 2006
Posts: 4
Location: Cremona (Italy)

Offline

PostPosted: Sat Jul 25, 2009 3:56 pm    Post subject: Reply with quote

meethemant wrote:

Do you think that if i am doing logon /logoff in clients(X)then it will register this information in security of event viewer of domain controller(Y).

X & Y are the host names

//br
hks


yes, I think this.
The system register every thing in your computer also login and log out... Smile
Back to top
View user's profile Send private message
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Exploits // System Weaknesses All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register