Dorian Software Solves the EVTX Log Format Puzzle for Legacy Operating Systems
Dorian’s New Technology, Offering Viewing of EVTX Files on Legacy Operating Systems, is the "Holy Grail" of Windows Log Management
For immediate release
8/19/2009 - Atlanta GA
Why can't I open this Windows Vista event log on my Windows XP machine?
This one question repeatedly stops system administrators, server operators, and forensic examiners dead in their tracks, as the new EVTX logging format found in Microsoft Windows Vista ®, Windows Server ® 2008, and Windows ® 7 surfaces in corporate and government networks.
The unsatisfying answer - at least until now - is that there is no forward compatibility available to read EVTX logs on popular legacy Microsoft ® operating systems like Windows XP ® and Windows Server 2003.
Microsoft completely redesigned their logging architecture with the advent of Windows Vista. And, while there are many new and beneficial features in the EVTX format, the nasty surprise is that the new API set of OS functions required to read these log files isn’t present in the legacy Microsoft operating systems.
As a result, automated systems, scripts, and log management packages that organizations have been relying upon in the past to meet compliance regulations and satisfy their auditors have suffered a major - if not crippling - setback.
One common approach to date is to run parallel systems for log management - one for the Windows XP / Windows Server 2003 side of the network, and one for the Windows Vista / Windows Server 2008 side. This is obviously cumbersome and adds to total licensing costs at precisely the wrong time for cash-strapped companies. Dorian’s initial approach for clients was to guarantee a superior level of reverse compatibility with its LogRefiner ™ Technology - so clients could set up one log management system on the Windows Vista and Windows Server 2008 platform that could also properly manage logs from the legacy operating systems.
The development team at Dorian Software Creations, Inc. quickly realized that the "game changer" would be to introduce a new technology that would enable EVTX log files to be open, read, and processed directly on legacy operating systems.
Certainly, offering true forward compatibility and superior reverse compatibility would make things even easier and less expensive for Dorian clients - as they could manage both logging formats seamlessly on whatever OS was more prevalent in their network. And, for many - if not most - Microsoft Windows-based networks, those “legacy” operating systems like Windows 2000, Windows XP, and Windows Server 2003 are still the most prevalent.
Dorian's development team set out to build this new technology and have indeed succeeded. While this new technology is in beta, the first Dorian title to implement it will be the Event Rover ® software. It will truly be the first EVTX log file viewer that will work on any legacy Microsoft operating system, from Windows Server 2000 and forward. Dorian anticipates release of this technology into its Total Log Management Solution beginning this Fall.
The addition of this technology will continue to strengthen Dorian's position in relation to its competitors, especially in the Windows log management space.
Based on the intensive R&D related to the project, the Dorian development team now has an intimate understanding of the EVTX logging format and its minutiae. They expect new ancillary technologies to be spawned from this cutting edge research, And, in fact, its LogHealer ™ Technology - recently included in Event Rover for corrupt EVTX file repair - is a derivative product of the overall effort.
For more information on Dorian Software Creations, Inc. and its patented Total Event Log Management Solution, visit http://www.doriansoftware.com. Technology licensing inquiries can be directed to licensing at doriansoft dot com. Dorian Software can also be contacted by phone at 1-866-682-3646 in North America.
Copyright © 2001-2009 Dorian Software Creations, Inc. Active Directory, Microsoft, Microsoft Windows, Windows Server, and Windows Vista are trademarks or registered trademarks of the Microsoft Corporation. All other trademarks are the trademarks of their respective companies. |
