Continued use of Windows will generate a large number of log files, but how can one easily monitor these files without having to go through a series of mouse clicks? Well, recently, we’ve been testing ...

Sysmon was once something you had to seek out and install. Now this pro-level system monitoring tool is integrated right into ...

I have Splunk setup with the universal forwarder installed on all of my Windows machines sending the event logs to Splunk. Collecting all of the event logs with Splunk is working great. Now I was ...

The basic workflow behind System Monitor is that it stores information from Windows Event Collection (Event Viewer) and Security Information and Event Management (SIEM) agents like process IDs, GUIDs, ...

As a PC user, diagnosing performance issues, blue screens, and weird behavior comes with the territory. Windows is often the culprit behind many of these problems, but it also has a built-in ...

Microsoft has started rolling out built-in Sysmon functionality to some Windows 11 systems enrolled in the Windows Insider ...

EventTracker, a handy tool that offers the ability to centralize Windows logs,correlate events to pinpoint an exact problem, and much more. While expensive monitoring products such as EventTracker ...

The default event logging in Windows 10 won't give you enough information to properly conduct intrusion forensics. These settings and tools will help you collect the needed log data. After a ...