<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Logged &#187; forensic logs</title>
	<atom:link href="http://www.syslog.org/logged/tag/forensic-logs/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.syslog.org/logged</link>
	<description>Event and Log Management</description>
	<lastBuildDate>Sun, 25 Jul 2010 21:40:27 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>On The Importance of Centralized Windows Event Logging</title>
		<link>http://www.syslog.org/logged/on-the-importance-of-centralized-windows-event-logging/</link>
		<comments>http://www.syslog.org/logged/on-the-importance-of-centralized-windows-event-logging/#comments</comments>
		<pubDate>Mon, 27 Apr 2009 19:55:42 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Windows]]></category>
		<category><![CDATA[logging]]></category>
		<category><![CDATA[forensic logs]]></category>
		<category><![CDATA[Windows syslog]]></category>

		<guid isPermaLink="false">http://www.syslog.org/logged/?p=70</guid>
		<description><![CDATA[I was just catching up on my reading on Technorati and came across this article that details the ways attackers can cover their tracks upon compromising a Windows server.  This article should serve as a warning: if your logs are not moved off to a separate server, you will lose visibility and key evidence in [...]<p>Post from: <a href="http://www.syslog.org/logged">Logged - Log Management Blog</a><br/><br/><a href="http://www.syslog.org/logged/on-the-importance-of-centralized-windows-event-logging/">On The Importance of Centralized Windows Event Logging</a></p>
]]></description>
		<wfw:commentRss>http://www.syslog.org/logged/on-the-importance-of-centralized-windows-event-logging/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
