Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need to find out how a website was hacked, I have the relevant IIS logs, but since there are too many visitors, It would be nice to have some kind of log analyzer that was not designed to only give you info about traffic but also would let you filter the useless lines of logs and even possibly highlight the suspicious ones.

Do you know any such tool?

Also the website was probably hacked through sql injection, any advice on what too search for? I know I should be looking for weird parameters, but that's not enough because the hacker might have used some forms to POST data, which are not logged in the log files all the time.

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

This page has some good examples on how to use Microsoft's Log Parser

http://mlichtenberg.wordpress.com/2011/02/03/log-parser-rocks-more-than-50-examples/

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.