You have successfully brute forced basic authentication configured on a Web server using Brutus hacking tool. The username / password is “Admin” and “Bettlemani@”. You logon to the system using the brute forced password and plant backdoors and rootkits.
After downloading various sensitive documents from the compromised machine, you proceed to clear the log files to hide your trace.
Which event log located at c:windowssystem32config contains the trace of your brute force attempts?
A.
SecEvent.Evt
B.
SysEvent.Evt
C.
WinEvent.Evt
D.
AppEvent.Evt
Explanation:
The Security Event log (SecEvent.Evt) will contain all the failed logins against the system.