Windows Log File Analysis in depth, Dave Kleiman

19 Sep 2012

Back by popular demand (and this time not from hospital) Dave took us through the various log files on Microsoft Windows systems (you did know there was more than just the event logs didn't you?) Among other things he looked at correlations between event log ids and other event logs, and how the Account Logon differs from the Logon/Logoff events and how they are intertwined across a network.