No more opening Event Viewer and immediately regretting it.

SIEM and SOAR allow enterprises to collect and correlate log event data but may not be the ideal choice for every organization. Microsoft’s Windows Event Forwarding aggregates system event logs from ...

PowerShell answers questions Windows' own menus never quite do.

Event 4688 documents each program a computer executes, its identifying data, and the process that started it. Several event 4688s occur on your system when you log into a system. For example, Session ...

Japan's Computer Emergency Response Center (JPCERT/CC) has shared tips on detecting different ransomware gang's attacks based on entries in Windows Event Logs, providing timely detection of ongoing ...

When a third-party impact causes your computer to shut down, restart, or lock up unexpectedly, you encounter the Event ID 6008 on the Windows computer. Many Windows users have reported this problem, ...

Security researchers have noticed a malicious campaign that used Windows event logs to store malware, a technique that has not been previously documented publicly for attacks in the wild. The method ...

Event ID 1795 is caused when Windows fails to update the Secure Boot Variable called DBX Revocation list, also known as Secure Boot Forbidden Signature Database. This list identifies the software that ...

I'm writing a Windows app in unmanaged C++ and want to log some simple events to the Application log. I'm normally a *nix guy and am used to being able to just call syslog() (or asl(3) on Mac OS X). I ...