forensics Archives

You are here: Sysadmins of the North » forensics

Merge multiple files into one new file in Windows

A quicky: if you need to merge multiple text files into one new file in Windows, you can use the copy command in cmd.exe, and here is how:

You are here: Sysadmins of the North » forensics

Grep for forensic log parsing and analysis on Windows Server IIS

by Jan Reilink

How to use GnuWin32 ported tools like grep.exe and find.exe for forensic log file analysis in Windows Server. In this article I’ll give some real live examples of using these ported GnuWin tools like grep.exe for logfile analysis on Windows servers. The article provides three example, as an alternative to LogParser, because finding spam scripts fast is often very important.

You are here: Sysadmins of the North » forensics

“Forensic Log Parsing with Microsoft’s LogParser”

by Jan Reilink

Just stumbled upon: Forensic Log Parsing with Microsoft’s LogParser. Log parser is a powerful, versatile tool that provides universal query access to text-based data such as log files, XML files and CSV files, as well as key data sources on the Windows® operating system such as the Event Log, the Registry, the file system, and Active Directory®.