//Microsoft Developer Studio generated resource script.
//
#include "resource.h"

#define APSTUDIO_READONLY_SYMBOLS
/////////////////////////////////////////////////////////////////////////////
//
// Generated from the TEXTINCLUDE 2 resource.
//
#include "afxres.h"

/////////////////////////////////////////////////////////////////////////////
#undef APSTUDIO_READONLY_SYMBOLS

/////////////////////////////////////////////////////////////////////////////
// English (U.S.) resources

#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_ENU)
#ifdef _WIN32
LANGUAGE LANG_ENGLISH, SUBLANG_ENGLISH_US
#pragma code_page(1252)
#endif //_WIN32

#ifdef APSTUDIO_INVOKED
/////////////////////////////////////////////////////////////////////////////
//
// TEXTINCLUDE
//

1 TEXTINCLUDE DISCARDABLE 
BEGIN
    "resource.h\0"
END

2 TEXTINCLUDE DISCARDABLE 
BEGIN
    "#include ""afxres.h""\r\n"
    "\0"
END

3 TEXTINCLUDE DISCARDABLE 
BEGIN
    "#define _AFX_NO_SPLITTER_RESOURCES\r\n"
    "#define _AFX_NO_OLE_RESOURCES\r\n"
    "#define _AFX_NO_TRACKER_RESOURCES\r\n"
    "#define _AFX_NO_PROPERTY_RESOURCES\r\n"
    "\r\n"
    "#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_ENU)\r\n"
    "#ifdef _WIN32\r\n"
    "LANGUAGE 9, 1\r\n"
    "#pragma code_page(1252)\r\n"
    "#endif //_WIN32\r\n"
    "#include ""res\\snare.rc2""  // non-Microsoft Visual C++ edited resources\r\n"
    "#include ""afxres.rc""         // Standard components\r\n"
    "#endif\r\n"
    "\0"
END

#endif    // APSTUDIO_INVOKED


/////////////////////////////////////////////////////////////////////////////
//
// Icon
//

// Icon with lowest ID value placed first to ensure application icon
// remains consistent on all systems.
IDR_MAINFRAME           ICON    DISCARDABLE     "res\\s_32.ico"

/////////////////////////////////////////////////////////////////////////////
//
// Dialog
//

IDD_ABOUTBOX DIALOG DISCARDABLE  0, 0, 235, 135
STYLE DS_MODALFRAME | WS_POPUP | WS_CAPTION | WS_SYSMENU
CAPTION "About SNARE"
FONT 8, "MS Sans Serif"
BEGIN
    ICON            IDR_MAINFRAME,IDC_STATIC,25,10,20,20
    LTEXT           "SNARE for Windows Copyright (C) Intersect Alliance Pty Ltd 1999 - 2003",
                    IDC_STATIC,75,10,105,25
    LTEXT           "Authors:",IDC_STATIC,25,40,35,8
    LTEXT           "Leigh Purdie<leigh.purdie@intersectalliance.com> George Cora<george.cora@intersectalliance.com>",
                    IDC_STATIC,25,50,170,20
    LTEXT           "SNARE: System iNtrusion and Audit Reporting Environment. SNARE includes the tools necessary to collect, control, filter and report on Windows audit events in real time.",
                    IDC_STATIC,23,77,200,26
    DEFPUSHBUTTON   "OK",IDOK,175,115,50,14,WS_GROUP
END

IDD_SNARE_DIALOG DIALOGEX 0, 0, 398, 196
STYLE DS_MODALFRAME | WS_MINIMIZEBOX | WS_POPUP | WS_VISIBLE | WS_CAPTION | 
    WS_SYSMENU
EXSTYLE WS_EX_APPWINDOW
CAPTION "SNARE - Remote Event Logging for Windows"
MENU IDR_MENU
FONT 8, "MS Sans Serif"
BEGIN
    GROUPBOX        "Real Time Event Display (select row for event details)",
                    IDC_STATIC,1,24,396,158
    CONTROL         "List1",IDC_MAIN_LIST,"SysListView32",LVS_REPORT | 
                    LVS_SINGLESEL | LVS_SHOWSELALWAYS | LVS_ALIGNLEFT | 
                    WS_BORDER | WS_TABSTOP,7,34,383,143
END

IDD_STATUS_DIALOG DIALOG DISCARDABLE  0, 0, 202, 166
STYLE DS_MODALFRAME | WS_POPUP | WS_CAPTION | WS_SYSMENU
CAPTION "Audit Status"
FONT 8, "MS Sans Serif"
BEGIN
    DEFPUSHBUTTON   "OK",IDOK,145,145,50,14
    LTEXT           "SNARE Audit Status",IDC_STATIC,60,5,85,8
    LTEXT           "Auditing Service Active?",IDC_STATIC,15,25,80,8
    LTEXT           "No",IDC_STATIC,120,25,10,8
    LTEXT           "SNARE Version:",IDC_STATIC,15,35,75,8
    LTEXT           "Total Events Processed:",IDC_STATIC,15,45,85,8
    LTEXT           "Service not running",IDC_STATIC,120,45,62,8
    LTEXT           "Total Events Filtered:",IDC_STATIC,15,65,90,8
    LTEXT           "Service not running",IDC_STATIC,120,35,62,8
    LTEXT           "Service not running",IDC_STATIC,120,55,62,8
    GROUPBOX        "",IDC_STATIC,5,15,190,120
    LTEXT           "Total Bytes Processed:",IDC_STATIC,15,75,75,8
    LTEXT           "Bucketloads",IDC_STATIC,120,65,60,8
    LTEXT           "Total Bytes Filtered:",IDC_STATIC,15,85,85,8
    LTEXT           "Bucketloads",IDC_STATIC,120,75,60,8
    LTEXT           "Total Events Lost:",IDC_STATIC,15,55,85,8
    LTEXT           "Bucketloads",IDC_STATIC,120,85,60,8
    LTEXT           "Security Event File Size:",IDC_STATIC,15,95,80,8
    LTEXT           "10 TeraBytes",IDC_STATIC,120,95,54,8
    LTEXT           "Application Event File Size:",IDC_STATIC,15,105,85,8
    LTEXT           "10 TeraBytes",IDC_STATIC,120,105,54,8
    LTEXT           "System Event File Size:",IDC_STATIC,15,115,85,8
    LTEXT           "10 TeraBytes",IDC_STATIC,120,115,54,8
END

IDD_CONFIG_DIALOG DIALOG DISCARDABLE  0, 0, 336, 290
STYLE DS_MODALFRAME | DS_CONTEXTHELP | WS_MINIMIZEBOX | WS_MAXIMIZEBOX | 
    WS_POPUP | WS_CAPTION | WS_SYSMENU
CAPTION "Audit Configuration"
FONT 8, "MS Sans Serif"
BEGIN
    EDITTEXT        IDC_LOCAL_HOST_NAME,145,20,175,12,ES_AUTOHSCROLL
    EDITTEXT        IDC_REMOTE_IP_ADDRESS,145,35,175,12,ES_AUTOHSCROLL
    EDITTEXT        IDC_PORT_NUMBER,145,50,175,12,ES_AUTOHSCROLL | 
                    WS_DISABLED
    CONTROL         "Enable SYSLOG header ",IDC_SYSLOG_CHECK,"Button",
                    BS_AUTOCHECKBOX | WS_TABSTOP,15,65,100,10
    COMBOBOX        IDC_SYSLOG_CLASSIFICATION,146,65,87,74,CBS_DROPDOWN | 
                    WS_VSCROLL | WS_TABSTOP
    COMBOBOX        IDC_SYSLOG_CRITIC,234,65,87,74,CBS_DROPDOWN | WS_VSCROLL | 
                    WS_TABSTOP
    CONTROL         "Tab",IDC_DELIMITER_RADIO,"Button",BS_AUTORADIOBUTTON | 
                    NOT WS_VISIBLE | WS_GROUP,149,266,29,10
    CONTROL         "Comma",IDC_DELIMITER_RADIO2,"Button",BS_AUTORADIOBUTTON | 
                    NOT WS_VISIBLE,17,262,39,10
    CONTROL         "Other:",IDC_DELIMITER_RADIO3,"Button",
                    BS_AUTORADIOBUTTON | NOT WS_VISIBLE,177,266,35,10
    EDITTEXT        IDC_DELIMITER_EDIT,77,263,16,14,ES_AUTOHSCROLL | NOT 
                    WS_VISIBLE
    CONTROL         "List4",IDC_OBJECTIVE_LIST,"SysListView32",LVS_REPORT | 
                    WS_BORDER | WS_TABSTOP,10,133,310,102
    PUSHBUTTON      "&Add an Objective",IDC_ADD_AN_OBJECTIVE,125,238,73,16
    DEFPUSHBUTTON   "OK",ID_OK,220,270,50,14
    PUSHBUTTON      "Cancel",IDCANCEL,275,270,50,14
    GROUPBOX        "General Audit System Parameters",IDC_STATIC,5,10,320,90
    LTEXT           "Enter the local host name",IDC_STATIC,15,20,85,10
    LTEXT           "Enter the remote ip or dns address",IDC_STATIC,15,35,
                    110,10
    LTEXT           "Enter the remote port number",IDC_PORT_STATIC,15,50,105,
                    10,WS_DISABLED
    GROUPBOX        "Audit Reporting Objectives",IDC_STATIC,5,106,320,152
    LTEXT           "To edit or delete an objective, right click the relevant row",
                    IDC_STATIC,75,118,190,10
    LTEXT           "Select the Syslog Field Delimiter character",
                    IDC_DELIM_STATIC,7,268,135,8,NOT WS_VISIBLE
    CONTROL         "Automatically set audit configuration",IDC_AUDIT_CHECK,
                    "Button",BS_AUTOCHECKBOX | WS_TABSTOP,15,84,126,10
    CONTROL         "Automatically set file system audit configuration",
                    IDC_FILE_AUDIT_CHECK,"Button",BS_AUTOCHECKBOX | 
                    WS_TABSTOP,149,85,166,10
END

IDD_MAIL_DIALOG DIALOG DISCARDABLE  0, 0, 242, 166
STYLE DS_MODALFRAME | WS_POPUP | WS_CAPTION | WS_SYSMENU
CAPTION "Mail Alert Configuration"
FONT 8, "MS Sans Serif"
BEGIN
    DEFPUSHBUTTON   "OK",IDOK,120,145,50,14
    PUSHBUTTON      "Cancel",IDCANCEL,180,145,50,14
    LTEXT           "Mail Alert Configuration Details",IDC_STATIC,69,5,98,10
    CONTROL         "Enable email tranmission of event records to an email address",
                    IDC_CHECK1,"Button",BS_AUTOCHECKBOX | WS_DISABLED | 
                    WS_TABSTOP,10,25,220,10
    GROUPBOX        "Email Details",IDC_STATIC,10,40,220,60,WS_DISABLED
    LTEXT           "Enter the email address",IDC_STATIC,15,50,80,10,
                    WS_DISABLED
    EDITTEXT        IDC_EDIT1,110,50,115,12,ES_AUTOHSCROLL | WS_DISABLED
    EDITTEXT        IDC_EDIT6,110,65,115,12,ES_AUTOHSCROLL | WS_DISABLED
    LTEXT           "Subject Line",IDC_STATIC,15,65,80,10,WS_DISABLED
    EDITTEXT        IDC_EDIT7,110,80,115,12,ES_AUTOHSCROLL | WS_DISABLED
    LTEXT           "Max mail messages per hour",IDC_STATIC,15,80,90,10,
                    WS_DISABLED
    GROUPBOX        "Alert Levels to Send",IDC_STATIC,10,105,220,26,
                    WS_DISABLED
    CONTROL         "Critical",IDC_CHECK2,"Button",BS_AUTOCHECKBOX | 
                    WS_DISABLED | WS_TABSTOP,20,115,37,10
    CONTROL         "Priority",IDC_CHECK3,"Button",BS_AUTOCHECKBOX | 
                    WS_DISABLED | WS_TABSTOP,60,115,37,10
    CONTROL         "Warning",IDC_CHECK4,"Button",BS_AUTOCHECKBOX | 
                    WS_DISABLED | WS_TABSTOP,100,115,43,10
    CONTROL         "Information",IDC_CHECK5,"Button",BS_AUTOCHECKBOX | 
                    WS_DISABLED | WS_TABSTOP,145,115,51,10
    CONTROL         "Clear",IDC_CHECK6,"Button",BS_AUTOCHECKBOX | 
                    WS_DISABLED | WS_TABSTOP,195,115,32,10
    LTEXT           "NOT YET IMPLEMENTED",IDC_STATIC,73,16,88,8
END

IDD_OBJECTIVE_DIALOG DIALOG DISCARDABLE  0, 0, 247, 366
STYLE DS_MODALFRAME | WS_MINIMIZEBOX | WS_MAXIMIZEBOX | WS_POPUP | 
    WS_CAPTION | WS_SYSMENU
CAPTION "Create or Edit an Objective"
FONT 8, "MS Sans Serif"
BEGIN
    CONTROL         "Logon or logoff",IDC_LOGONOFF_RADIO,"Button",
                    BS_AUTORADIOBUTTON | WS_GROUP,20,36,63,10
    CONTROL         "Account administration",IDC_GROUP_RADIO,"Button",
                    BS_AUTORADIOBUTTON,120,36,87,10
    CONTROL         "Access a file or directory",IDC_FILEACCESS_RADIO,"Button",
                    BS_AUTORADIOBUTTON,20,51,93,10
    CONTROL         "Change the security policy",IDC_SECPOLICY_RADIO,"Button",
                    BS_AUTORADIOBUTTON,120,51,105,10
    CONTROL         "Start or stop a process",IDC_PROCESS_RADIO,"Button",
                    BS_AUTORADIOBUTTON,20,66,87,10
    CONTROL         "Restart, shutdown and system",IDC_RESTART_RADIO,"Button",
                    BS_AUTORADIOBUTTON,120,66,110,10
    CONTROL         "Use of user rights",IDC_USERRIGHT_RADIO,"Button",
                    BS_AUTORADIOBUTTON,20,81,71,10
    CONTROL         "Any event(s)",IDC_ALLEVENTS_RADIO,"Button",
                    BS_AUTORADIOBUTTON,120,81,100,10
    EDITTEXT        IDC_EVENTID_EDIT,90,113,142,12,ES_AUTOHSCROLL
    EDITTEXT        IDC_SEARCH_EDIT,90,134,142,12,ES_AUTOHSCROLL
    CONTROL         "Include Search Term Users",IDC_USER_RADIO,"Button",
                    BS_AUTORADIOBUTTON | WS_GROUP,17,169,102,10
    CONTROL         "Exclude Search Term Users",IDC_USER_RADIO2,"Button",
                    BS_AUTORADIOBUTTON,124,169,104,10
    EDITTEXT        IDC_USER_EDIT,88,185,142,12,ES_AUTOHSCROLL
    CONTROL         "Success Audit",IDC_SUCCESS_CHECK,"Button",
                    BS_AUTOCHECKBOX | WS_TABSTOP,18,218,61,10
    CONTROL         "Information",IDC_INFO_CHECK,"Button",BS_AUTOCHECKBOX | 
                    WS_TABSTOP,103,218,51,10
    CONTROL         "Error",IDC_ERROR_CHECK,"Button",BS_AUTOCHECKBOX | 
                    WS_TABSTOP,173,218,31,10
    CONTROL         "Failure Audit",IDC_FAILURE_CHECK,"Button",
                    BS_AUTOCHECKBOX | WS_TABSTOP,18,232,55,10
    CONTROL         "Warning",IDC_WARNING_CHECK,"Button",BS_AUTOCHECKBOX | 
                    WS_TABSTOP,103,232,43,10
    CONTROL         "Security",IDC_SECLOG_CHECK,"Button",BS_AUTOCHECKBOX | 
                    WS_TABSTOP,18,263,41,10
    CONTROL         "System",IDC_SYSLOG_CHECK,"Button",BS_AUTOCHECKBOX | 
                    WS_TABSTOP,98,263,39,10
    CONTROL         "Application",IDC_APPLOG_CHECK,"Button",BS_AUTOCHECKBOX | 
                    WS_TABSTOP,168,263,51,10
    CONTROL         "Directory Service",IDC_DIRLOG_CHECK,"Button",
                    BS_AUTOCHECKBOX | WS_TABSTOP,18,277,70,10
    CONTROL         "DNS Server",IDC_DNSLOG_CHECK,"Button",BS_AUTOCHECKBOX | 
                    WS_TABSTOP,98,277,54,10
    CONTROL         "File Replication",IDC_REPLOG_CHECK,"Button",
                    BS_AUTOCHECKBOX | WS_TABSTOP,168,277,64,10
    CONTROL         "Critical",IDC_CRITIC_RADIO,"Button",BS_AUTORADIOBUTTON | 
                    WS_GROUP,33,308,40,8
    CONTROL         "Priority",IDC_PRIORITY_RADIO,"Button",
                    BS_AUTORADIOBUTTON,113,308,40,10
    CONTROL         "Warning",IDC_WARNING_RADIO,"Button",BS_AUTORADIOBUTTON,
                    178,308,43,10
    CONTROL         "Information",IDC_INFO_RADIO,"Button",BS_AUTORADIOBUTTON,
                    33,323,51,10
    CONTROL         "Clear",IDC_CLEAR_RADIO,"Button",BS_AUTORADIOBUTTON,113,
                    323,32,10
    DEFPUSHBUTTON   "OK",IDOK,69,343,50,14
    PUSHBUTTON      "Cancel",IDCANCEL,125,343,50,14
    PUSHBUTTON      "Help",ID_HELP,180,343,50,14
    LTEXT           "This window allows an ""objective"" to be defined. Events will only be reported if they match the items below.",
                    IDC_STATIC,15,5,215,15
    GROUPBOX        "Identify the high level event to be audited",IDC_STATIC,
                    12,25,225,73
    GROUPBOX        "Filter events based on an expression",IDC_STATIC,12,103,
                    225,51
    GROUPBOX        "Select the Alert Level",IDC_STATIC,12,295,225,43
    CONTROL         159,IDC_STATIC,"Static",SS_BITMAP,18,323,9,9
    CONTROL         155,IDC_STATIC,"Static",SS_BITMAP,98,308,9,9
    CONTROL         158,IDC_STATIC,"Static",SS_BITMAP,163,308,9,9
    CONTROL         157,IDC_STATIC,"Static",SS_BITMAP,18,308,9,9
    CONTROL         193,IDC_STATIC,"Static",SS_BITMAP,98,323,9,9
    LTEXT           "EventID Search Term",IDC_STATIC,15,115,70,10
    LTEXT           "User Search Term",IDC_STATIC,19,186,67,10
    LTEXT           "Non-header Search Term",IDC_STATIC,15,135,67,10
    GROUPBOX        "Select the Event Type to Capture",IDC_STATIC,12,208,225,
                    40
    GROUPBOX        "Select the Event Logs to Capture From",IDC_STATIC,12,
                    253,225,40
    GROUPBOX        "User Search Expression",IDC_STATIC,12,158,225,47
END

IDD_CONTROL_DIALOG DIALOG DISCARDABLE  0, 0, 322, 146
STYLE DS_MODALFRAME | WS_POPUP | WS_CAPTION | WS_SYSMENU
CAPTION "Remote Control Configuration"
FONT 8, "MS Sans Serif"
BEGIN
    CONTROL         "Allow SNARE agent to be remote controlled",
                    IDC_REMOTE_CONTROL_CHECK,"Button",BS_AUTOCHECKBOX | 
                    WS_TABSTOP,15,28,160,10
    EDITTEXT        IDC_IP_ADDRESS_CONTROL_EDIT,175,58,120,12,ES_AUTOHSCROLL
    CONTROL         "Change default web server port ",
                    IDC_WEB_SERVER_PORT_CHECK,"Button",BS_AUTOCHECKBOX | 
                    WS_TABSTOP,15,98,117,10
    EDITTEXT        IDC_WEB_SERVER_PORT_EDIT,139,98,50,12,ES_AUTOHSCROLL
    DEFPUSHBUTTON   "OK",IDOK,203,127,50,14
    PUSHBUTTON      "Cancel",IDCANCEL,260,127,50,14
    LTEXT           "Remote Control Configuration Details",IDC_STATIC,85,10,
                    120,8
    CONTROL         "Allow remote control only from this IP address",
                    IDC_IP_ALLOW_CHECK,"Button",BS_AUTOCHECKBOX | WS_TABSTOP,
                    15,59,157,10
    CONTROL         "Set password for remote access",IDC_PASSWORD_CHECK,
                    "Button",BS_AUTOCHECKBOX | WS_TABSTOP,15,78,117,10
    EDITTEXT        IDC_PASSWORD_EDIT,140,78,110,12,ES_PASSWORD | 
                    ES_AUTOHSCROLL
    GROUPBOX        "Remote Control Parameters",IDC_STATIC,10,45,302,74
END


#ifndef _MAC
/////////////////////////////////////////////////////////////////////////////
//
// Version
//

VS_VERSION_INFO VERSIONINFO
 FILEVERSION 1,0,0,1
 PRODUCTVERSION 1,0,0,1
 FILEFLAGSMASK 0x3fL
#ifdef _DEBUG
 FILEFLAGS 0x1L
#else
 FILEFLAGS 0x0L
#endif
 FILEOS 0x4L
 FILETYPE 0x1L
 FILESUBTYPE 0x0L
BEGIN
    BLOCK "StringFileInfo"
    BEGIN
        BLOCK "040904B0"
        BEGIN
            VALUE "CompanyName", "\0"
            VALUE "FileDescription", "snare MFC Application\0"
            VALUE "FileVersion", "1, 0, 0, 1\0"
            VALUE "InternalName", "snare\0"
            VALUE "LegalCopyright", "Copyright (C) 2002\0"
            VALUE "LegalTrademarks", "\0"
            VALUE "OriginalFilename", "snare.EXE\0"
            VALUE "ProductName", "snare Application\0"
            VALUE "ProductVersion", "1, 0, 0, 1\0"
        END
    END
    BLOCK "VarFileInfo"
    BEGIN
        VALUE "Translation", 0x409, 1200
    END
END

#endif    // !_MAC


/////////////////////////////////////////////////////////////////////////////
//
// DESIGNINFO
//

#ifdef APSTUDIO_INVOKED
GUIDELINES DESIGNINFO DISCARDABLE 
BEGIN
    IDD_ABOUTBOX, DIALOG
    BEGIN
        LEFTMARGIN, 7
        RIGHTMARGIN, 228
        TOPMARGIN, 7
        BOTTOMMARGIN, 128
    END

    IDD_SNARE_DIALOG, DIALOG
    BEGIN
        LEFTMARGIN, 7
        RIGHTMARGIN, 391
        TOPMARGIN, 7
        BOTTOMMARGIN, 189
    END

    IDD_STATUS_DIALOG, DIALOG
    BEGIN
        LEFTMARGIN, 7
        RIGHTMARGIN, 195
        TOPMARGIN, 7
        BOTTOMMARGIN, 159
    END

    IDD_CONFIG_DIALOG, DIALOG
    BEGIN
        LEFTMARGIN, 7
        RIGHTMARGIN, 329
        TOPMARGIN, 7
        BOTTOMMARGIN, 283
    END

    IDD_MAIL_DIALOG, DIALOG
    BEGIN
        LEFTMARGIN, 7
        RIGHTMARGIN, 235
        TOPMARGIN, 7
        BOTTOMMARGIN, 159
    END

    IDD_OBJECTIVE_DIALOG, DIALOG
    BEGIN
        LEFTMARGIN, 7
        RIGHTMARGIN, 240
        TOPMARGIN, 7
        BOTTOMMARGIN, 359
    END

    IDD_CONTROL_DIALOG, DIALOG
    BEGIN
        LEFTMARGIN, 7
        RIGHTMARGIN, 315
        TOPMARGIN, 7
        BOTTOMMARGIN, 139
    END
END
#endif    // APSTUDIO_INVOKED


/////////////////////////////////////////////////////////////////////////////
//
// Menu
//

IDR_MENU MENU DISCARDABLE 
BEGIN
    POPUP "File"
    BEGIN
        MENUITEM "Exit",                        ID_FILE_EXIT
    END
    POPUP "View"
    BEGIN
        MENUITEM "Audit Status...",             ID_VIEW_AUDITSTATUS
    END
    POPUP "Setup"
    BEGIN
        MENUITEM "Audit Configuration...",      ID_SETUP_AUDITCONFIGURATION
        MENUITEM "Mail Configuration...",       ID_SETUP_MAILCONFIGURATION
        MENUITEM "Remote Control Configuration...", 
                                                ID_SETUP_REMOTECONTROLCONFIGURATION

    END
    POPUP "Activity"
    BEGIN
        MENUITEM "Apply and Restart Audit",     ID_ACTIVITY_APPLYANDRESTARTAUDIT

        MENUITEM "Clear the Display",           ID_ACTIVITY_CLEARTHEDISPLAY
    END
    POPUP "Help"
    BEGIN
        MENUITEM "Documentation...",            ID_HELP
        MENUITEM "Comment on SNARE",            ID_HELP_COMMENTONSNARE
        MENUITEM "Intersect Alliance Website",  ID_HELP_INTERSECTALLIANCEWEBSITE

        MENUITEM SEPARATOR
        MENUITEM "About...",                    ID_HELP_ABOUT
    END
END


/////////////////////////////////////////////////////////////////////////////
//
// Bitmap
//

IDB_PRIORITY            BITMAP  DISCARDABLE     "res\\priority.bmp"
IDB_CRITIC              BITMAP  DISCARDABLE     "res\\critic.bmp"
IDR_TOOLBAR             BITMAP  DISCARDABLE     "res\\toolbar.bmp"
IDB_INFORMATION         BITMAP  DISCARDABLE     "res\\information.bmp"

/////////////////////////////////////////////////////////////////////////////
//
// Toolbar
//

IDR_TOOLBAR TOOLBAR DISCARDABLE  24, 24
BEGIN
    BUTTON      ID_TOOLBAR_STATUS
    BUTTON      ID_TOOLBAR_RESTART
    SEPARATOR
    BUTTON      ID_TOOLBAR_AUDITCONF
    BUTTON      ID_TOOLBAR_NETWORK
    BUTTON      ID_TOOLBAR_MAILNOTIFY
    SEPARATOR
    BUTTON      ID_TOOLBAR_CLEARDISPLAY
    SEPARATOR
    BUTTON      ID_HELP
    BUTTON      ID_TOOLBAR_COMMENTS
    BUTTON      ID_TOOLBAR_INTERSECT
END


/////////////////////////////////////////////////////////////////////////////
//
// Dialog Info
//

IDD_CONFIG_DIALOG DLGINIT
BEGIN
    IDC_SYSLOG_CLASSIFICATION, 0x403, 7, 0
0x654b, 0x6e72, 0x6c65, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 5, 0
0x7355, 0x7265, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 5, 0
0x614d, 0x6c69, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 7, 0
0x6144, 0x6d65, 0x6e6f, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 5, 0
0x7541, 0x6874, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 7, 0
0x7953, 0x6c73, 0x676f, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 4, 0
0x704c, 0x0072, 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 5, 0
0x654e, 0x7377, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 5, 0
0x5555, 0x5043, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 5, 0
0x7243, 0x6e6f, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 9, 0
0x7541, 0x6874, 0x7270, 0x7669, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 4, 0
0x7446, 0x0070, 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 7, 0
0x6f4c, 0x6163, 0x306c, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 7, 0
0x6f4c, 0x6163, 0x316c, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 7, 0
0x6f4c, 0x6163, 0x326c, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 7, 0
0x6f4c, 0x6163, 0x336c, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 7, 0
0x6f4c, 0x6163, 0x346c, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 7, 0
0x6f4c, 0x6163, 0x356c, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 7, 0
0x6f4c, 0x6163, 0x366c, "\000" 
    IDC_SYSLOG_CLASSIFICATION, 0x403, 7, 0
0x6f4c, 0x6163, 0x376c, "\000" 
    IDC_SYSLOG_CRITIC, 0x403, 10, 0
0x6d45, 0x7265, 0x6567, 0x636e, 0x0079, 
    IDC_SYSLOG_CRITIC, 0x403, 6, 0
0x6c41, 0x7265, 0x0074, 
    IDC_SYSLOG_CRITIC, 0x403, 9, 0
0x7243, 0x7469, 0x6369, 0x6c61, "\000" 
    IDC_SYSLOG_CRITIC, 0x403, 6, 0
0x7245, 0x6f72, 0x0072, 
    IDC_SYSLOG_CRITIC, 0x403, 8, 0
0x6157, 0x6e72, 0x6e69, 0x0067, 
    IDC_SYSLOG_CRITIC, 0x403, 7, 0
0x6f4e, 0x6974, 0x6563, "\000" 
    IDC_SYSLOG_CRITIC, 0x403, 12, 0
0x6e49, 0x6f66, 0x6d72, 0x7461, 0x6f69, 0x006e, 
    IDC_SYSLOG_CRITIC, 0x403, 6, 0
0x6544, 0x7562, 0x0067, 
    0
END


/////////////////////////////////////////////////////////////////////////////
//
// String Table
//

STRINGTABLE DISCARDABLE 
BEGIN
    IDS_ABOUTBOX            "&About snare..."
END

STRINGTABLE DISCARDABLE 
BEGIN
    ID_VIEW_AUDITSTATUS     "View the Audit Status\nView the Audit Status"
END

STRINGTABLE DISCARDABLE 
BEGIN
    ID_TOOLBAR_STATUS       "Show the status of the service"
    ID_BUTTON32787          "Hello1\nHello2"
    ID_TOOLBAR_AUDITCONF    "Set the audit configuration"
    ID_TOOLBAR_NETWORK      "Configure the remote control parameters"
    ID_TOOLBAR_MAILNOTIFY   "Configure the mail notification sub-system"
    ID_TOOLBAR_CLEARDISPLAY "Clear the display"
    ID_TOOLBAR_COMMENTS     "Send comments to the Intersect Alliance team"
    ID_TOOLBAR_RESTART      "Apply and restart the SNARE service"
END

STRINGTABLE DISCARDABLE 
BEGIN
    ID_TOOLBAR_INTERSECT    "Visit the Intersect Alliance website"
END

STRINGTABLE DISCARDABLE 
BEGIN
    ID_HELP                 "View SNARE documentation"
END

#endif    // English (U.S.) resources
/////////////////////////////////////////////////////////////////////////////


/////////////////////////////////////////////////////////////////////////////
// English (Australia) resources

#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_ENA)
#ifdef _WIN32
LANGUAGE LANG_ENGLISH, SUBLANG_ENGLISH_AUS
#pragma code_page(1252)
#endif //_WIN32

/////////////////////////////////////////////////////////////////////////////
//
// Icon
//

// Icon with lowest ID value placed first to ensure application icon
// remains consistent on all systems.
IDI_EXEC                ICON    DISCARDABLE     "res\\exec.ico"
IDI_RED                 ICON    DISCARDABLE     "res\\icon6.ico"
IDI_CONVERT             ICON    DISCARDABLE     "res\\convert.ico"
IDI_EXEC2               ICON    DISCARDABLE     "res\\icon5.ico"
IDI_PROPERTIES          ICON    DISCARDABLE     "res\\properties.ico"
IDI_JUMPTO              ICON    DISCARDABLE     "res\\jumpto.ico"
IDI_MAIL                ICON    DISCARDABLE     "res\\mail.ico"
IDI_MAILTO              ICON    DISCARDABLE     "res\\mailto.ico"
IDI_REFRESH             ICON    DISCARDABLE     "res\\refresh.ico"
IDI_TRASH               ICON    DISCARDABLE     "res\\trash.ico"

/////////////////////////////////////////////////////////////////////////////
//
// Dialog
//

IDD_WAIT_DIALOG DIALOG DISCARDABLE  0, 0, 127, 22
STYLE DS_MODALFRAME | WS_POPUP | WS_VISIBLE
FONT 8, "MS Sans Serif"
BEGIN
    LTEXT           "Restarting Service. Please wait ...",IDC_STATIC,7,7,113,
                    10
END

IDD_EVENT_DIALOG DIALOG DISCARDABLE  0, 0, 357, 246
STYLE DS_MODALFRAME | WS_POPUP | WS_CAPTION | WS_SYSMENU
CAPTION "Event Details"
FONT 8, "MS Sans Serif"
BEGIN
    DEFPUSHBUTTON   "OK",IDOK,300,225,50,14
    LTEXT           "User",IDC_STATIC,31,56,25,8
    EDITTEXT        IDC_USER_EDIT,67,53,85,13,ES_AUTOHSCROLL | ES_READONLY
    PUSHBUTTON      "Up",IDC_NEXT_BUTTON,184,222,35,14
    PUSHBUTTON      "Down",IDC_PREVIOUS_BUTTON,136,222,35,14
    LTEXT           "Criticality Level",IDC_STATIC,5,15,50,10
    LTEXT           "Hostname",IDC_STATIC,15,34,33,8
    LTEXT           "Event Log Source",IDC_STATIC,5,95,60,10
    LTEXT           "Date and Time",IDC_STATIC,168,14,50,10
    LTEXT           "Event ID",IDC_STATIC,180,55,35,10
    LTEXT           "SID Type",IDC_STATIC,23,75,35,10
    LTEXT           "Event Log Type",IDC_STATIC,161,75,55,10
    LTEXT           "Computer Name",IDC_STATIC,160,35,55,10
    LTEXT           "Audit Category",IDC_STATIC,168,95,50,10
    EDITTEXT        IDC_SYSTEM_EDIT,58,32,95,13,ES_AUTOHSCROLL | ES_READONLY
    EDITTEXT        IDC_CRITICALITY_EDIT,63,13,90,12,ES_AUTOHSCROLL | 
                    ES_READONLY
    EDITTEXT        IDC_DATE_EDIT,223,12,122,13,ES_AUTOHSCROLL | ES_READONLY
    EDITTEXT        IDC_SOURCE_EDIT,67,94,85,13,ES_AUTOHSCROLL | ES_READONLY
    EDITTEXT        IDC_EVENTID_EDIT,223,53,85,13,ES_AUTOHSCROLL | 
                    ES_READONLY
    EDITTEXT        IDC_SID_EDIT,67,74,85,13,ES_AUTOHSCROLL | ES_READONLY
    EDITTEXT        IDC_EVENTLOGTYPE_EDIT,224,73,85,13,ES_AUTOHSCROLL | 
                    ES_READONLY
    EDITTEXT        IDC_COMPUTER_EDIT,223,32,112,13,ES_AUTOHSCROLL | 
                    ES_READONLY
    EDITTEXT        IDC_CATEGORY_EDIT,223,93,85,13,ES_AUTOHSCROLL | 
                    ES_READONLY
    EDITTEXT        IDC_EXPANDSTRING_EDIT,18,134,151,75,ES_MULTILINE | 
                    ES_READONLY | WS_VSCROLL
    EDITTEXT        IDC_DATASTRING_EDIT,188,134,139,75,ES_MULTILINE | 
                    ES_READONLY | WS_VSCROLL
    LTEXT           "Data String",IDC_STATIC,240,120,50,8
    LTEXT           "Expanded String",IDC_STATIC,65,120,55,8
END


/////////////////////////////////////////////////////////////////////////////
//
// DESIGNINFO
//

#ifdef APSTUDIO_INVOKED
GUIDELINES DESIGNINFO DISCARDABLE 
BEGIN
    IDD_WAIT_DIALOG, DIALOG
    BEGIN
        LEFTMARGIN, 7
        RIGHTMARGIN, 120
        TOPMARGIN, 7
        BOTTOMMARGIN, 15
    END

    IDD_EVENT_DIALOG, DIALOG
    BEGIN
        LEFTMARGIN, 7
        RIGHTMARGIN, 350
        TOPMARGIN, 7
        BOTTOMMARGIN, 239
    END
END
#endif    // APSTUDIO_INVOKED


/////////////////////////////////////////////////////////////////////////////
//
// Menu
//

IDR_POPUP_MENU MENU DISCARDABLE 
BEGIN
    POPUP " "
    BEGIN
        MENUITEM "Edit Objective",              ID_EDITOBJECTIVE
        MENUITEM "Delete Objective",            ID__DELETEOBJECTIVE
    END
END


/////////////////////////////////////////////////////////////////////////////
//
// Bitmap
//

IDB_WARNING             BITMAP  DISCARDABLE     "res\\warning.bmp"
IDB_CLEAR               BITMAP  DISCARDABLE     "res\\clear.bmp"
IDB_BITMAP_SMALL        BITMAP  DISCARDABLE     "res\\bitmap1.bmp"
IDB_BITMAP_LARGE        BITMAP  DISCARDABLE     "res\\bitmap2.bmp"
#endif    // English (Australia) resources
/////////////////////////////////////////////////////////////////////////////



#ifndef APSTUDIO_INVOKED
/////////////////////////////////////////////////////////////////////////////
//
// Generated from the TEXTINCLUDE 3 resource.
//
#define _AFX_NO_SPLITTER_RESOURCES
#define _AFX_NO_OLE_RESOURCES
#define _AFX_NO_TRACKER_RESOURCES
#define _AFX_NO_PROPERTY_RESOURCES

#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_ENU)
#ifdef _WIN32
LANGUAGE 9, 1
#pragma code_page(1252)
#endif //_WIN32
#include "res\snare.rc2"  // non-Microsoft Visual C++ edited resources
#include "afxres.rc"         // Standard components
#endif

/////////////////////////////////////////////////////////////////////////////
#endif    // not APSTUDIO_INVOKED

