Continued use of Windows will generate a large number of log files, but how can one easily monitor these files without having to go through a series of mouse clicks? Well, recently, we’ve been testing ...

I have Splunk setup with the universal forwarder installed on all of my Windows machines sending the event logs to Splunk. Collecting all of the event logs with Splunk is working great. Now I was ...

Microsoft is apparently integrating System Monitor (Sysmon) directly into Windows 11. This pro-level tool allows you to ...

As a PC user, diagnosing performance issues, blue screens, and weird behavior comes with the territory. Windows is often the culprit behind many of these problems, but it also has a built-in ...

EventTracker, a handy tool that offers the ability to centralize Windows logs,correlate events to pinpoint an exact problem, and much more. While expensive monitoring products such as EventTracker ...

Microsoft has started rolling out built-in Sysmon functionality to some Windows 11 systems enrolled in the Windows Insider ...

Overview Microsoft is embedding Sysmon directly into Windows 11, eliminating manual installation and deployment ...

The default event logging in Windows 10 won't give you enough information to properly conduct intrusion forensics. These settings and tools will help you collect the needed log data. After a ...

I'm writing a Windows app in unmanaged C++ and want to log some simple events to the Application log. I'm normally a *nix guy and am used to being able to just call syslog() (or asl(3) on Mac OS X). I ...