- Audit Logs and Security
- Audit Incidents
- Syslog
- Remote Logging
- Linux Process Accounting
- Configuring Windows Logging
- Setting up Remote Logging in Windows
- NtSyslog
- EventReporter
- Application Logs
- Extended Logging in IIS Server
- Examining Intrusion and Security Events
- Significance of Synchronized Time
- Event Gathering
- EventCombMT
- Writing Scripts
- Event Gathering Tools
- Forensic Tool: Fwanalog
- End-to End Forensic Investigation
- Correlating Log files
- Investigating TCPDump
- IDS Loganalyais: RealSecure
- IDS Loganalysis: SNORT

Source:
http://www.eccouncil.org/EC-Council%20Education/Chfi-Course.htm

Don