[808] in Intrusion Detection Systems
Re: Remote Logging
daemon@ATHENA.MIT.EDU (Gene Spafford)
Thu Dec 12 05:24:44 1996
To: ids@uow.edu.au
In-Reply-To: Message from Mike <cryption@poboxes.com> of
"Mon, 02 Dec 1996 21:39:04 -0500"
<2.2.32.19961203023904.0068cec0@pop3.ziplink.net>
Date: Sun, 08 Dec 1996 19:47:34 -0500
From: spaf@cs.purdue.edu (Gene Spafford)
Reply-To: ids@uow.edu.au
> I caught some of the conversation on audit trails and the likes, and wanted
> to know if anyone knows any FAQ's, web pages, or books..etc, that explain a
> bit on how one could have local log files, and also log the same info
> remotely, making it a great deal harder for an intruder to erase his prescense