Shiro : a centralized system for detecting attacks from windows event logs
The proposed SHIRO system, an attack detection system on the centralized log server that aims to detect and analyze the attacks on Windows 7 clients by focusing on the three most critical Common Vulnerabilities and Exposures, can detect three types of attacks accurately, making this project useful for the administrator...