CVE-2018-16167

LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors...

CVE-2018-16165

LogonTracer (visual Windows log analysis tool) is affected by CVE-2018-16165: Cross-site Scripting (CWE-79) in version 1.2.0 and earlier. An attacker could remotely inject arbitrary script/HTML into a victim’s browser via unspecified vectors. The connected JVN entry confirms this CVE and notes a ...

CVE-2018-16168

CVE-2018-16168 affects LogonTracer up to version 1.2.0. It enables remote code execution via Python code injection on the server where LogonTracer is installed; vectors are not detailed in the core CVE description. JVN/CVEs formally enumerate a Code Injection vulnerability (CWE-94) affecting Logo...

Visualizing Windows Active Directory Event Logs: LogonTracer

Investigate malicious logon by visualizing and analyzing Windows active directory event logs. LogonTracer associates a host name or an IP address and account name found in logon-related events and displays it as a graph. This way, it is possible to see in which account login attempt occurs and...