Network Abuse Program:

This program is used to cross reference IP & Dates with log files, and find further information using Active Directory.

Parse email to get date, IP and Case #; Download log files, unzip, search for matching IP in appropriate date range. Use information in log file to query active directory for further user information.