A Powershell script is needed which anonymize the IP, FQDN, username and put the real values in a new table.
Should run in a folder and crawl all *.txt and *.log files. search for IP, fqdn, username and put org value into a new file with count, hash, real value and also replace the real value with the hash.
eg.
source:
"https://*.[login to view URL],https://*.[login to view URL]"
*://*.[login to view URL]
[login to view URL]
[login to view URL]
[login to view URL]{searchTerms}&src=IE-SearchBox&FORM=IESR02
http://intranet
[login to view URL]
[login to view URL]
[login to view URL]
C:\Users\admin\Downloads
\C:\Users\admin\AppData\Roaming\Microsoft\Windows\IEPrivacyIE,"\\@\0\\?\C:\Users\admin\AppData\Local\Microsoft\Internet Explorer",\\@\0\\?\C:\Use
rs\admin\AppData\Local\Mozilla
C:\Users\joe\Downloads
modified:
"https://*.[login to view URL],https://*.[login to view URL]"
*://*.[login to view URL]
[login to view URL]
[login to view URL]
[login to view URL]{searchTerms}&src=IE-SearchBox&FORM=IESR02
http://shortname1
https://IPadress1
IPadress2
IPadress2/24
C:\Users\user1\Downloads
\C:\Users\user1\AppData\Roaming\Microsoft\Windows\IEPrivacyIE,"\\@\0\\?\C:\Users\user1\AppData\Local\Microsoft\Internet Explorer",\\@\0\\?\C:\Use
rs\user1\AppData\Local\Mozilla
C:\Users\user2\Downloads
deanonymize file:
count hash value
5 [login to view URL] [login to view URL]
8 [login to view URL] [login to view URL]
8 [login to view URL] [login to view URL]
4 [login to view URL] [login to view URL]
9 [login to view URL] [login to view URL]
5 shortname1 intranet
6 IPadress1 [login to view URL]
8 IPadress2 [login to view URL]
3 user1 admin
2 user2 joe