Hunt them in Windows

What is Windows Event Log?

It is a comprehensive record of events pertaining to the system, security and applications on Windows operating system. It like an end to end trail logging mechanism of your system that can help you in tracking, troubleshooting the system or application issues.

All such windows event logs have a unique code to identify the specific logged event or issue with other details like source, datetime, level, user etc.

Windows event logs can be located under …

detection engineering hunt information security open source threat hunting windows