Patent ID: 7661139

Claim:
A system for detecting invalid access of a plurality of computer devices managed at the operating system level by a plurality of computer servers including a first server and a second server, the system comprising: first receiving means for receiving, over a computer network, a first set of local loglooker files from a first server; second receiving means for receiving, over a computer network, a second set of local loglooker files from a second server; and means for gathering at least the first set of local loglooker files and second set of local loglooker files into a central loglooker database; wherein: the first and the second set of loglooker files include a list of non-authorized userids, a list of non-authorized computer devices and a suspect list; the first server operates on a first type of operating system; the second server operates on a second type of operating system; and the first type is different than the second type.