EventID.Net Documents

1. Best Practices for Security Incident Response
A paper outlining best practices for responding to security incidents. Recommended reading for anyone who will be handling security incidents.
2. What are decimal, binary and hex values?
*If you work with computers, in many occasions you have heard about binary, decimal and hex numbers. This article provides a description of these numbering systems in layman terms as well as how to convert them using the "Calculator" application that ships with Windows.
3. Auditing policies - their meaning and recommended settings
*Most probably you have used Auditing policies set via the group policies. Do you know what do they mean and how to configure them?
4. Learn how to manage your IP addresses
*TCP/IP protocol is now de facto standard for almost any organization. Network administrators need to manage the allocation of various IP subnets used within their organization. This document provides a summary of our methodology in dealing with this issue as well as an Excel spreadsheet template that we recommend to our customers.
5. Kerberos ticket options
*A description of the ticket options field that appear in certain Windows security event logs
6. Windows Logon Processes
*A list of logon processes that appear in Windows security event logs
7. Windows Authentication Packages
*A description of various Windows authentication packages that are listed in security event logs
8. Windows Logon Types
*Many Windows security events contain a field indicating the "logon type". This article explains what those numbers mean.
9. Troubleshooting template
A template that can be used by network support people in their troubleshooting process and interaction with their customers
10. Ethernet terms and real-life analogies
*Ethernet terms like Half-duplex or questions like "Is 100 Mbs ten times faster than 10 Mbs?" are given oversimplified descriptions or answers as their intention is to give somebody an "idea" on what these terms mean by using comparisons with "non-technical" situations.
11. What is the event source?
Information about event sources and how to obtain more information about them.
12. Error types
A short description of the most common types of errors encountered in the IT world.
13. DES Encryption Standard - Theory and example
As a firewall or VPN administrator, one may use the term "DES" or "3DES" daily. Cryptographers surely know what's behind it and Senior Security Consultants understand the principle. But have you ever wondered just how are the bits (1s and 0s) manipulated during the DES encryption? Just how are they moved around? Well, this article is just an attempt to provide a simple example of such encryption process.
14. Challenges in managing firewalls
A review of responsibilities taken by firewall administrators
15. How to unlink a Windows 2000 Group Policy
This article describes the process of unlinking vs. deleting a Windows 2000 Group Policy.
16. How to obtain a fix
*Information about obtaining fixes listed on various Microsoft Q articles.
17. The Magic Touch
*7 Principles On Troubleshooting Like A Pro
18. Net Helpmsg Command
*Obtain additional information about Windows NT/2000 network error codes
19. Event ID 677
A discussion about the Security 677 Failure Audit Events.
20. NT/2000 Event Logs and Event Types
Description of NT/2000 event logs and event types
21. Viewing remote Event Logs
*Why do you see "The description for Event ID (xxx) in Source (xxx) could not be found." as event description and how to fix that.
22. Event Log Entry Structure
*How are the event log entries structured
23. The Search For Information
*Learn to use the proper keywords when searching the Internet