Re: AS400 logs help

Michael Sorbera <[email protected]> Mon, 16 Jul 2007 21:43:18 -0500
Newsgroups gmane.comp.security.forensics
Message-ID <[email protected]>
Fernando,
If they are using an AS/400 as a webserver, then someone there can 
browse to the directory where the web pages are using windows explorer.  
They will have an SNA session and a special drive mapping that gives 
them access.  Once there, it's a simple matter of finding the logs.
Michael

Fernando Diego Daffara wrote:
> Hi, I could use some (all) help! I have to make a forensics analysis of the
> AS400 login/logoff logs records. But i don't have any idea about where to
> start looking! :-( 
>
> AS400 is another world! Could someone get my an idea about how to start
> looking, some web links, etc?
>
> I will be able to ask to the AS400 administrator for the data, but I want to
> go witch some idea about AS400 logs, how to look it, where they are, how
> long do they are maintained?
>
> Thanks in advance and I'm really shamed because of my English!
>
> Fernando.
>
> Argentina
>
>
>
>