IR Event Log Analysis
Windows event logs contain a bewildering variety of messages. But homing in on a few key events can quickly profile attacker activity.
From administrator logins, to scheduled tasks, to entries related to system services, and more-- the event logs are a one-stop shop.
Learn to \crack the code" and enhance your investigations by adding event log analysis to your toolset.
.png "Finding_Evil_WMI_Event_Consumers_with_Disk_Forensics_-Blog_(1).png")
.png "Blog_teaser_images_(19).png")
