Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to find out how a website was hacked, I have the relevant IIS logs, but since there are too many visitors, It would be nice to have some kind of log analyzer that was not designed to only give you info about traffic but also would let you filter the useless lines of logs and even possibly highlight the suspicious ones.

Do you know any such tool?

Also the website was probably hacked through sql injection, any advice on what too search for? I know I should be looking for weird parameters, but that's not enough because the hacker might have used some forms to POST data, which are not logged in the log files all the time.

share|improve this question
up vote 1 down vote accepted

This page has some good examples on how to use Microsoft's Log Parser

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.