Windows Event Logs: 10 Event IDs That Reveal an Intruder
Windows writes down almost everything an attacker does. Most people never read it. These are the ten Security-log event IDs that matter, what each one means, and the PowerShell to pull them in seconds.
Continue reading → 6 min read