Analysis and Evaluation of the Windows Event Log - Bill Buchanan

Barrie Codona, BSc (Hons) Network Computing, 2007
1.3 Aims and Objectives
The aim of this project is:
1. To develop a solution that addresses the flaws in the Windows event logging
service.
To achieve the aim, the following objectives of this project are to:
1. Investigate current research that is occurring in the field of Event Log
Management and Digital Forensics.
2. Produce an analysis of the weaknesses in the Windows event log.
3. Design a suitable piece of software using an appropriate methodology.
4. Evaluate using a proven methodology.
1.4 Thesis Structure
Chapter 1
Chapter 2
Chapter 3
Chapter 4
Chapter 5
Chapter 6
Introduction. This chapter will present some background information
and define the aims and objectives for the project.
Literature Review. This chapter will investigate the current research
that is occurring in the field of Event Log Management and Digital
Forensics.
Windows Event Log. This chapter provides an investigation into the
Windows Event logging service.
Design. This chapter will provide an overview of the proposed
software prototype that is to be developed.
Implementation. This chapter will introduce the prototyped software
that has been developed and a series of tests that will be designed to
ensure that the software fulfils the requirements.
Evaluation. This chapter presents the tested results of the prototyped
system that has been previously developed.
11