Nhóm làm LOG của Win NT vào đây !

Sau một buổi tối google mình đã tìm đc 1 số tài liệu ( tất nhiên là English :)
thấy có vẻ sát nhất với đề tài này là cuốn

Windows Nt Event Logging

tuy nhiên chưa tìm thấy chỗ nào cho down :( các bác giúp phát ~

Author:	James D. Murray
Format:	Other
Publish Date:	January 1998
Edition:	1st
ISBN-10:	1565925149
ISBN-13:	9781565925144
List Price:	$34.95

Event logging is a facility used by computer systems to record the occurrence of significant events. An "event" is any change that occurs in a system -- for example, a user logon, an addition to a file, a change to a user's privileges, or an application program error. This book describes Windows NT event logging for three main audiences:

• For system administrators, using event logging as a tool for analyzing performance and troubleshooting system problems; includes the details of the system's Event Viewer.
• For Win 32 programmers, using the event logging API from C, Visual Basic 5, Perl 5 for Win32, Visual J++, C++/MFC (Microsoft Foundation Classes). Also describes how to localize the contents of the system's message files to create event log records in non-English languages.
• For security administrators, using event logging to specify and audit security-related events. Specifies the NT security auditing events and summarizes the specific security auditing requirements imposed on C2-level secure systems.
The book comes with a CD-ROM containing examples from the book and many contributed event logging and auditing software packages.

==========================================================
Mình xin đề xuất anh em trong nhóm nghiên cứu các tiêủ mục như sau :

• Quân : user logon
  
• Sơn : Object Access & Directory Service Access (truy cập file & các đối tượng khác)
• Toàn : Policy Change & Privilege use (quyền của user)
• Lộc : Process Tracking & System Events.
• Khánh :Account Management

Tài liệu tham khảo (anh em có gì hay hãy update bằng Comment ) :

- Quà từ bác Bill
- Collected by Loc8meng2