All,
I mentioned this preso on log mining on the list in the past, but
never released a copy (only privately). I think time for it has come:
http://chuvakin.blogspot.com/2007/09/another-presentation-final-full-log.html
Best,
--
Anton Chuvakin, Ph.D., GCIA, GCIH, GCFA
http://www.chuvakin.org
http://chuvakin.blogspot.com
http://www.info-secure.org