I have Splunk setup with the universal forwarder installed on all of my Windows machines sending the event logs to Splunk. Collecting all of the event logs with Splunk is working great. Now I was ...

No more opening Event Viewer and immediately regretting it.

In Event Viewer, the errors logged are common, and you will come across different errors with different Event IDs. The events that are recorded in the security logs usually will be either of the ...

This publication defines a baseline for event logging best practices to mitigate cyber threats. It was developed by the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) ...

Powershell command can help you retrieve all software installation and removal events from the Event Log. The WinEvent option can go through the log files, filter based on source, and show the result.

I'm writing a Windows app in unmanaged C++ and want to log some simple events to the Application log. I'm normally a *nix guy and am used to being able to just call syslog() (or asl(3) on Mac OS X). I ...