HackTheBox - Analyzing Windows Event Logs En Masse
Julian X. — Cyber Security Analyst
The Get-WinEvent cmdlet is an essential PowerShell tool for querying Windows Event Logs at scale. It will make your job much easier by letting you search through all kinds of logs, from the familiar System and Application logs to the more advanced ones created by Windows Event Log services and Event Tracing for Windows (ETW). https://jjeuribe.github.io/posts/hackthebox-analyzing-windows-event-logs-en-masse/
1 reactions · 0 comments