What tool can I use that logs when my PC is accessed by another? For example, a program that logs if I was pinged, or if one of my ports was scanned, or if someone tried to get into my PC. I can't find this in the event logs. I'm not sure if Port Reporter or PortQuy provides this or not. Thanks.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Rhinorhino on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Event logs for scans/pings/breakins
- Thread starter Techie64
- Start date
Part of your question (Another connection) can be solved by enabling the Security Logs. To do this you have to turn on Auditing.
The audit log appears in the Security log in Event Viewer. To enable this feature:
Click Start, click Control Panel, click Performance and Maintenance, and then click Administrative Tools.
Double-click Local Security Policy.
In the left pane, double-click Local Policies to expand it.
In the left pane, click Audit Policy to display the individual policy settings in the right pane.
Double-click Audit object access.
Select the Success check box for the security objects you want audited for successful use.
To audit unsuccessful access to these objects, select the Failure check box.
To enable auditing of both, select both check boxes.
Click OK.
The other part could be solved by looking at your Firewall log. You have to enable logging if you are using Window's Firewall.
For third party solutions have a look at Port Explorer.
The audit log appears in the Security log in Event Viewer. To enable this feature:
Click Start, click Control Panel, click Performance and Maintenance, and then click Administrative Tools.
Double-click Local Security Policy.
In the left pane, double-click Local Policies to expand it.
In the left pane, click Audit Policy to display the individual policy settings in the right pane.
Double-click Audit object access.
Select the Success check box for the security objects you want audited for successful use.
To audit unsuccessful access to these objects, select the Failure check box.
To enable auditing of both, select both check boxes.
Click OK.
The other part could be solved by looking at your Firewall log. You have to enable logging if you are using Window's Firewall.
For third party solutions have a look at Port Explorer.
- Status
Similar threads
