Event
Logging in Windows NT/2000
¨Security-related events such as
failed login attempts or failed access to files are stored in file
SecEvent.Evt
¨System events such as inability in
starting a system service are stored in file SysEvent.Evt
¨Application events related to
applications such as databases or web servers are stored in file
AppEvent.Evt