Event 4688 documents each program a computer executes, its identifying data, and the process that started it. Several event 4688s occur on your system when you log into a system. For example, Session ...

Continued use of Windows will generate a large number of log files, but how can one easily monitor these files without having to go through a series of mouse clicks? Well, recently, we’ve been testing ...

If you are looking for good free software to view, manage and analyze your Windows Event Logs, you may want to check out these three – Event Log Manager, Event Log Explorer and Lepide Event Log ...

Windows Event Viewer shows the system events and helps review app, security, and system logs useful to check errors on Windows 11. However, this handy utility can stop working for various reasons, ...

The default event logging in Windows 10 won't give you enough information to properly conduct intrusion forensics. These settings and tools will help you collect the needed log data. After a ...

Microsoft has released Sysmon 15, converting it into a protected process and adding the new ‘FileExecutableDetected’ option to log when executable files are created. For those not familiar with Sysmon ...

Take advantage of the Windows Event Log to store the log data of your .NET Core applications running on Windows The Windows operating system logs data into the Windows Event Log whenever a problem ...

Microsoft has released Sysmon 12, and it comes with a useful feature that logs and captures any data added to the Windows Clipboard. This feature can help system administrators and incident responders ...

How to track down USB flash drive usage with Windows 10’s Event Viewer Your email has been sent Whether you're conducting a digital forensics investigation or ...