The default Event Log Viewer in Windows 11/10 is very effective at what it sets out to do but doesn’t do everything one might need from such a tool. And that’s fine because the basis is what most ...

This post explains how to view or clear the Event Log in the Event Viewer (eventvwr.msc) on a Windows PC. Windows 11/10 OS may occasionally throw up errors, and at such times, you may want to get a ...

Take advantage of the Windows Event Log to store the log data of your .NET Core applications running on Windows The Windows operating system logs data into the Windows Event Log whenever a problem ...

How to track down USB flash drive usage with Windows 10’s Event Viewer Your email has been sent Whether you're conducting a digital forensics investigation or ...

Event 4688 documents each program a computer executes, its identifying data, and the process that started it. Several event 4688s occur on your system when you log into a system. For example, Session ...

I'm trying to trouble shoot a crazy installation issue installing a published app on WTS. For the life of me I cannot figure out why the Microsoft Installer keeps rolling back and the only thing I can ...

SIEM and SOAR allow enterprises to collect and correlate log event data but may not be the ideal choice for every organization. Microsoft’s Windows Event Forwarding aggregates system event logs from ...

Free unofficial patches are available for a new Windows zero-day flaw dubbed EventLogCrasher that lets attackers remotely crash the Event Log service on devices within the same Windows domain. This ...

Finding ransomware traces in Event Logs The investigation strategy proposed by JPCERT/CC covers four types of Windows Event Logs: Application, Security, System, and Setup logs. These logs often ...

I have been given a quest, and I humbly request the assistance of the hive mind. I have a saved copy of the security logs of a Windows 7 PC. The head humanoid wishes to know the exact times a certain ...