sina@blog:~$ grep -r "Tag: Windows Event log" /var/log/blog
3 events matched
In the realm of Windows security, special logon privileges play a crucial role in managing user permissions and maintaining system integrity. These privileges enable specific actions that can …
cat event-code-4672-explained-mastering-special-logon-privileges-in-windows-security.mdIntroduction: Webshells are malicious scripts or programs that attackers deploy on web servers to gain unauthorized access and control. Detecting these webshells is crucial for maintaining the security …
cat detecting-webshells-with-sysmon-a-technical-analysis.mdEvent ID 4624 is generated in the Windows Security Log when a successful logon occurs on a local computer. This event is generated on the computer that was accessed, …
cat rdp-event-logs-tracking-4624-4625.md