Анализ журналов событий ОС Windows // Демо-занятие курса «Аналитик SOC»

In this open lesson, we'll cover: What event logs exist in Windows; How to expand the event logging capabilities of Windows using built-in mechanisms; What Sysmon is and what its advantages are; What tools are available for analyzing events in Windows. After this lesson, you'll know: The main event logs in Windows; How to configure event auditing in Windows; How Sysmon expands event logging capabilities in Windows; What tools help analyze event logs in Windows. SOC Analyst - https://otus.pw/6x5zu/ Instructor: Konstantin Kalmykov - Senior SOC Analyst, specializing in incident investigations and process automation within SOCs. Take the survey following the event - https://otus.pw/LuKC/ Follow the project's news: → VK: https://vk.com/otusru → Telegram: https://t.me/Otusjava → Habr: https://otus.pw/S0nM/ → Max: https://otus.pw/wVga/