TechNet Support WebCast: TCP/IP port and process auditing

Session Summary

Has your system security been compromised? Is your computer running processes for someone other than you? In this Support WebCast Tim Rains, a technical lead on the Microsoft Product Support Services (PSS) Security team, discusses one approach to answer these questions: auditing processes and TCP/UDP port usage on Microsoft Windows systems.

This is a Level 200 (http://support.microsoft.com/default.aspx?scid=gp;en-us;webcastlevels&sd=gn) session that was recorded Tuesday, December 14, 2004, and presented by Tim Rains.

Tim Rains is a technical lead on the Microsoft Product Support Services Security team. His team helps customers with incident response investigations. He has developed several utilities including PortQry, DNSLint, SPCheck, the NetBIOS Browsing Console (Browcon), NBLookup, Port Reporter and Port Reporter Parser (PR-Parser).

Viewing the Presentation

To view, please click on the link: View this Support Webcast (Length: 14:38 minutes)

This Windows Streaming Media archive requires an Internet connection of 28.8 Kbps or faster, and is best viewed with a minimum screen resolution of 800 X 600.

Offline viewing download (http://download.microsoft.com/download/1/8/7/18794101-3f7e-4675-aef8-adf1006deba0/wc121404-offline.exe) - If you wish to view the streaming media archive offline, download a copy of this self-extracting .exe file to your hard drive, and double-click the file.

Additional Resources

Download presentation (http://download.microsoft.com/download/1/8/7/18794101-3f7e-4675-aef8-adf1006deba0/wc121404.exe) - This is a Microsoft PowerPoint (.ppt) file.
If you do not have PowerPoint and you want a copy of the slides, please use the PowerPoint Viewer (http://www.microsoft.com/downloads/details.aspx?FamilyID=428d5727-43ab-4f24-90b7-a94784af71a4&DisplayLang=en) (1,911 KB).
Read the transcript (http://download.microsoft.com/download/1/8/7/18794101-3f7e-4675-aef8-adf1006deba0/wct121404.exe)

Supplemental reading:

• Description of the Port Reporter Parser (PR-Parser) tool (http://support.microsoft.com/default.aspx?kbid=884289)

Provide Feedback on this Broadcast (http://support.microsoft.com/common/survey.aspx?scid=sw;en;1073&p0=wc&p1=en-us&p2=WC121404)

Support WebCasts Home (http://support.microsoft.com/webcasts)