Rich·Apr 15Howto alert on non IT folks running a CLITL;DR how to enable logging and then query against a white list of IT folks to identify possible users getting phished.
Hemaprasadpotnuru·Apr 6Windows Lab 2: Login Success & Failure MonitoringToday I worked on my second Windows lab, focusing on analyzing login activity using Event Viewer. This lab helped me understand how Windows…
Rich·Mar 27Enabling PowerShell ScriptBlock and Transcript LoggingTL;DR Disabling LLMNR, mDNS, & NetBIOS, require SMB Signing, enabling Sysmon, and enabling both PowerShell Script Block and Transcript…A response icon1
Aya Emad·Mar 9THM,Windows Event Logs write-up :)After learning about logs with linux ( syslog , journald ) , widows having their logs controller too. And actually windows events logs…A response icon1
