 Log management is excellent for tracking and identifying unauthorized users that might be trying to access the network, and what authorized users have been accessing in the network and changes to user authorities.Software that record and index user activities within window sessions such as ObserveIT provide comprehensive audit trail of user activities when connected remotely through terminal services, Citrix and other remote access software.According to a 2006 survey of 3243 Nmap users by Insecure.Org, Nessus, Wireshark, and Snort were some top-rated network security tools.