Figure 2

Figure 2: An NT Logon Event passed to `syslog`

Jul  1 09:04:29 Wed Jul 01 09:02:36 1998: CO7030JWEINBERG/Security
(528) - "Successful Logon: User Name: jweinberg Domain: CO7030JWEINBERG
Logon ID: (0x0,0x1954) Logon Type: 2 Logon Process: User32
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: CO7030JWEINBERG"

Figure 2: An NT Logon Event passed to syslog

Figure 2: An NT Logon Event passed to `syslog`