)
Troubleshooting PKI Problems on Windows Vista
CryptoAPI 2.0 (CAPI2) Diagnostics is a feature in Windows Vista® and Windows Server® 2008. This feature provides administrators with the ability to troubleshoot PKI problems by collecting detailed information about certificate chain validation, certificate store operations, and signature verification. With CAPI2 Diagnostics, it is easier to identify the cause of most public key infrastructure (PKI
Windows Security Logging and Other Esoterica
thoughts from the Windows auditing team Farewell for now... I have resigned from Microsoft and am moving to another company. I hope my blog has been helpful to... Date: 06/10/2012 Off Topic: Unicode Right-to-Left Override character used by malware Here's an interesting thing for you security types to be aware of. Many of you probably are careful... Date: 08/22/2011 An interesting logging regulatio
)
イベント クエリã¨ã‚¤ãƒ™ãƒ³ãƒˆ XML
指定æ¡ä»¶ã«ä¸€è‡´ã—ãŸç‰¹å®šã‚¤ãƒ™ãƒ³ãƒˆã‚’照会ã—ã¦ã€é–¢å¿ƒã®ãªã„イベントをフィルタ処ç†ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ãŸã¨ãˆã°ã€ã‚»ã‚ュリティ イベント ãƒã‚°ã«è¨˜éŒ²ã•ã‚ŒãŸã™ã¹ã¦ã®é‡è¦ã‚¤ãƒ™ãƒ³ãƒˆã®æƒ…å ±ã‚’å–å¾—ã™ã‚‹ã«ã¯ã€ã“ã®æ¡ä»¶ã¨ä¸€è‡´ã—ãŸã‚¤ãƒ™ãƒ³ãƒˆã‚’è¿”ã™ã‚¯ã‚¨ãƒªã‚’定義ã§ãã¾ã™ã€‚ 次ã®ä¾‹ã§èª¬æ˜Žã™ã‚‹ã‚ˆã†ã«ã€ã™ã¹ã¦ã®ã‚¤ãƒ™ãƒ³ãƒˆã¯ XML ã§è¡¨ç¾ã§ãã€å„イベント XML ã¯ã€ã‚¤ãƒ™ãƒ³ãƒˆ スã‚ーマ (https://go.microsoft.com/fwlink/?LinkID=81771) ã§æ¤œè¨¼ã§ãã¾ã™ã€‚XPath 㯠XML è¦ç´ ã®ãƒ„リーを移動ã—ã¦é¸æŠžã§ãã‚‹ã®ã§ã€ã‚¤ãƒ™ãƒ³ãƒˆ クエリ㯠XPath å¼ã§å®šç¾©ã•ã‚Œã¾ã™ã€‚XPath å¼ã«ä¸€è‡´ã—ãŸã‚‚ã®ã®ã†ã¡ã€XML ã§å®šç¾©ã•ã‚ŒãŸã‚¤ãƒ™ãƒ³ãƒˆã®ã¿ãŒã€ã‚¯ã‚¨ãƒªçµæžœã«è¿”ã•ã‚Œã¾ã™ã€‚XPath ã§ã‚¤ãƒ™ãƒ³ãƒˆ クエリを定義ã™ã‚‹æ–¹æ³•ã®è©³ç´°ã«ã¤ã„ã¦ã¯ã€XPath 構文 (https://go.microsoft.com
1
ランã‚ング
ランã‚ング
メンテナンス
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
)
Event Selection (Windows)
Exporting Events with Wevtutil Using a Time-Based Query – Fish Eagle Limited
Event Schema - Win32 apps
{{#tags}}- {{label}}
{{/tags}}