Elementary Security
Audits
The Event Viewer
audits the Security. One of the main responsibilities for
you, the Administrator, is to control what goes into and out of your
computers.
When you
review the security logs, you may see that someone logged onto your
computer. The NT AUTHORITY means the system needs to access your
files.
WHOSE
system? This log indicates that the anonymous logon came from a
workstation named DEATHBOT.
Well,
although the name seems scary, it is the computer down the hallway
in the engineer's room. The Network address confirms that it is
someone in this local area network because the IP address begins
with 192.168.2.xxx.