Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm looking to start a service where I collect Windows events from consumer computers over an SSL link (https) but I want to make sure that extremely sensitive information wouldn't be contained in the data (especially if a hacker got a hold of the information)

share|improve this question

1 Answer 1

up vote 7 down vote accepted

We can't answer that. Applications can put whatever they want into the logs; you could write a key logger that logged every keystroke on the system into the event log, or a web app that dumped every user's plaintext password into a log entry.

You also haven't defined what "extremely sensitive" means to you. By default, Windows isn't logging anything that most people would consider "extremely sensitive", but in certain environments, account names of users or IP addresses of systems are considered extremely sensitive.

Logs are just as sensitive as the data that's in them; that's the best answer we can give you.

share|improve this answer
    
I actually never thought about how vague my question was. Thanks! –  Gabriel Graves Jul 15 '12 at 6:14
    
Also, bear in mind that in any decent-sized environment, your logs will probably contain a few account passwords from when someone put their password in the username field by mistake, so they're generally some kind of sensitive, but how sensitive is not answerable. –  HopelessN00b Jul 16 '12 at 12:43

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.