Searching Exchange ...
 
Notifications
Clear all

Searching Exchange Server logs that are 100met plus

1 Posts
1 Users
0 Reactions
1,115 Views
(@cybertend)
Eminent Member
Joined: 6 years ago
Posts: 22
Topic starter  

I am working on a case where I am looking for a remote threat actor who came in from a foreign IP to a users email who had their password compromised.

The challenge is the logs are 100Meg plus and my commercial software will not index log files that are 100meg plus.

Outside of using grep, which is fine I suppose, any recommendations on an alternate way to read these?


   
Quote
Share: