If you do not find any event log on the computer, restarting the Windows Event Log service might help. System File Checker or SFC is the built-in tool of Windows that can fix corrupt system files. It ...

Sysmon was once something you had to seek out and install. Now this pro-level system monitoring tool is integrated right into ...

I have Splunk setup with the universal forwarder installed on all of my Windows machines sending the event logs to Splunk. Collecting all of the event logs with Splunk is working great. Now I was ...

I have visions of regularly dumping and clearing Windows event logs and storing them in the medium-long term in a SQL database.<BR><BR>Why? So I can query them -<BR>"Show me all previous occurances of ...

The default event logging in Windows 10 won't give you enough information to properly conduct intrusion forensics. These settings and tools will help you collect the needed log data. After a ...