Log Fidelity Corp.

LogClarity® is designed completely different than any other log management solution available today! The Windows security log foundation is flawed and LogClarity correctly solves several implementation problems that Microsoft has failed to correct LogClarity® takes an “Analyze First” approach to log collection and management. LogClarity® looks at the underlying Microsoft security log structure and performs intelligent analysis of the Description Field of each log as the logs get generated by the Windows auditing system. The analysis is based on years of “Log Interpretation Research” which has deciphered and uncovered the true definitions of the Windows security logs. LogClarity® converts the convoluted logs that most log experts can’t decipher, into a clear concise log format. This process of intelligent analysis is called the Log Clarity Design Framework (LCDF). The LCDF intelligence engine automatically removes redundant logs, correlates multiple logs into a single understandable event and dramatically improves log forensics and alerting capabilities. By understanding the short comings of the Windows logs, LogClarity® can remove the fundamental issues that make Windows log management issues so difficult all automatically without any user intervention.

Group Policy Object changes

One significant advantage that LogClarity® provides is our cutting-edge GPO Tracking technology. LogClarity can alert users of any change to a GPO across the enterprise including a full audit trail of “what changed” “What the previous attribute was” including “who made the change”. Microsoft doesn’t even log GPO changes which clearly shows that every other log management solution on the market cannot provide the level of auditing on Windows that LogClarity can provide. This features along with many others allow new security and forensic capabilities that no other log management solution can offer. LogClarity® ensures the most essential security protection, extensible forensic traversing and built-in regulatory compliance support.

Why All-in-One or Syslog-based Log Management tools aren’t specialized enough for Windows

Every log management solution that was developed in the last five to ten years has the same major problem when faced with dealing with Window security logs which is, they don’t have the knowledge and expertise required to overcome the Windows security log structural flaws which exist. Any administrator or security expert that has opened up “Event Viewer” and made attempts to gather any relevant data knows that the security logs on Windows are quite different from system logs.

Gathering all the logs to a central repository is not enough to truly assist security administrators tackle the unknown, undocumented, security logs on Windows domain controllers and servers. Security administrators have found that when faced with real-world scenarios the network-based or Syslog-based solutions miss the mark completely or fall short of expectations. These tools don’t solve the Windows specific problems which absolutely need special handling before the security logs get collected and stored.

Why a Windows Specific Log Management solution is essential

Over the last decade, Microsoft’s Windows has become a dominating force in the desktop and enterprise server market. Companies have implemented Windows into their core business model because of its ease of use and wide range of services.
At the same time, new security legislation has been adopted across all business sectors and has continued to get more stringent and challenging for companies. to meet. With security threats increasing and new challenges set by internal and external security policies combined with widely adopted Microsoft systems the need for a solid log management solution for Windows is painfully obvious.
Unfortunately Windows security logs are not as simple to understand or manage as they are on other platforms.

Windows Security logs are:

LogClarity® provides the solution

 

Search Knowledge Base Privacy Statement Copyright © 2006 Log Fidelity Corp.