EVTX and Windows Event Logging

This paper will explore Microsoft's EVTX log format and Windows Event Logging framework. The EVTX data stream and structure will be defined as a basis for the Windows Event Logging framework and log subscription components that can be used to collect and correlate logs in a complex Windows-based...

By

Brandon Charter

November 13, 2008

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Why_SANS_-_Blog_-_4_Trends_That_Will_Define_the_CISO’s_Role_in_2024_340_x_340.jpg

Cybersecurity Insights

4 Trends That Will Define the CISO's Role in 2024

These are the topics most prevalent in countless discussions with security leaders and experts.

340x340_-_Blog_-_Why_SANS_infographic_-_Day_1_(2).jpg

Cybersecurity Insights

4 Key Cybersecurity Trends to Watch in 2024

This infographic shows four major trends that will give CISOs the opportunity to empower their organizations and security teams in 2024.

Cybersecurity Insights

The Ultimate List of SANS Cheat Sheets

Need help cutting through the noise? SANS has a massive list of Cheat Sheets available for quick reference.