Improving Web Application Security: Threats and Countermeasures

If ASP.NET is used as the host, IIS auditing features are enabled.

If required, a custom channel sink is used to perform logging on the client and the server.