This program monitors the security event logs of all your Windows NT/2000/XP servers and workstations and alerts you to possible intrusions/attacks in real time.
Besides analyzing security event logs, GFI LANguard S.E.L.M. can analyze application, system and other event logs too. You can backup and clear event logs on all remote machines in your network automatically; and view, report and filter events network-wide, instead of just per machine. Because GFI LANguard S.E.L.M. collects all events to a central database, it is easy to create network-wide reports and custom filters. Using the custom rules, you can create your own event alerts based on event ID, condition and contents.
