Analysis and Evaluation of the Windows Event Log - Bill Buchanan

CO42019 – Project 4
Computer Name
PC1
PC2
Local Users
Barrie
Donald
Barrie
Task:
To inject the security log from PC1 into PC2 and note any effects or problems
Screen shot of security log on PC1
Then started working on PC2
Cleared the Security log on PC 2
Privileged object operation:
Object Server: EventLog
Object Handle: 11670928
Process ID: 748
Primary User Name: PC2$
Primary Domain: WORKGROUP
Primary Logon ID: (0x0,0x3E7)
Client User Name: Barrie
Client Domain: PC2
Client Logon ID: (0x0,0x109A9)
Privileges: SeSecurityPrivilege
Project – Week 4.doc Page 2 of 14