Micosoft LogParser MSC Assignment

Hello In this demonstration I will evalaute tool microsoft logparser on one idea - that is Windows event log record of everything that happened on a machine, and Log Parser lets you quries those events using SQL , the same language used for databases The story I chose is , a break-in . Someone got into a computer, and the event log silently recorded the traces. My job in the demo is to play investigator: take a log file you've never seen, and use queries to reconstruct what the intruder did, step by step. That reconstruction is the demo. Why this maps to Murphey's paper Murphey's whole paper is about a four-stage pipeline: recover → repair → validate → collate Since I am using publicly available event logs I demonstrate last 2 stages validate and collate