Intrusion detection system based on gathering NT event LOG from multiple windows 2000 machines - MUSTAFA Abdullah (University of Glamorgan, 2002)