- Training
- Training Live Events
- Training Without Travel
- SANS Courses
- Certified Instructors
- Career Roadmap
- Training Calendars
- SANS @Home
- SANS OnDemand
- Community SANS
- SANS Mentor Program
- SANS Onsite
- SANS SelfStudy
- SANS Partnership Series
- SANS Workshop Series
- Webcasts
- Work Study
- Events Archive
- DoD 8570
- Voucher Credit Program
- group discounts
- Certification
- Resources
- Vendor
- Portal
- Storm Center
- College
- Developer
- About
the most trusted source for computer security training, certification and research
Archiving Event Logs
- Abstract
- Archived event logs often play an important role in the detection, investigation, and prosecution of a computer crime or other computer misuse. Configuring network devices and computer systems to produce event logs that contain valuable information is the first step in detecting computer crime. Proper archiving will further aid in the investigation and allow the event logs to be entered as evidence in court.