Config File

Servers

Event Descriptions

Config Data Example

{"Servers": {"localhost": {"Security": [4732,4735,4740,4756]        },"remotecomputer": {"Security": [4624,4625,4648,4728],"System": [1500,1501]        }    },"Event Descriptions": {"Security": {"4624":"An account was successfully logged on.","4625":"An account failed to log on.","4648":"A logon was attempted using explicit credentials.","4728":"A member was added to a security-enabled global group.","4732":"A member was added to a security-enabled local group.","4735":"A security-enabled local group was changed.","4740":"A user account was locked out.","4756":"A member was added to a security-enabled universal group."        },"System": {"1500":"The Group Policy settings for the computer were processed successfully. There were no changes detected since the last successful processing of Group Policy.","1501":"The Group Policy settings for the user were processed successfully. There were no changes detected since the last successful processing of Group Policy."        }    }}

Usage

fromwindowseventmonitorimportevent_monitorif__name__=="__main__":app=event_monitor.Event_Monitor("config.json")app.run()

Dependencies

Authors

License