The "EventLogCrasher" 0day For Remotely Disabling Windows Event Log, And a Free Micropatch For It

If you ever troubleshooted anything on Windows or investigated a suspicious event, you know that Windows store various types of events in Windows Event Log. An application crashed and you want to know more about it? Launch the Event Viewer and check the Application log. A service behaving strangely? See the System log. A user account got unexpectedly blocked? The Security log may reveal who or what blocked it.

All these events are getting stored to various logs through the …

0day application check event events free launch log micropatch store types viewer windows