Ars Technica

Windows Event Log - why so complicated?

I'm writing a Windows app in unmanaged C++ and want to log some simple events to the Application log. I'm normally a *nix guy and am used to being able to just call syslog() (or asl(3) on Mac OS X). I ...
Ars Technica

Extracting Windows Event logs to a SQL Database, is this a silly plan?

I have visions of regularly dumping and clearing Windows event logs and storing them in the medium-long term in a SQL database.<BR><BR>Why? So I can query them -<BR>"Show me all previous occurances of ...
InfoWorld

How to log data to the Windows Event Log in C#

Take advantage of the Windows Event Log to store the log data of your .NET Core applications running on Windows The Windows operating system logs data into the Windows Event Log whenever a problem ...
CSOonline

How to optimize Windows event logging to better investigate attacks

The default event logging in Windows 10 won't give you enough information to properly conduct intrusion forensics. These settings and tools will help you collect the needed log data. After a ...
CSOonline

The most important Windows 10 security event log IDs to monitor

Event 4688 documents each program a computer executes, its identifying data, and the process that started it. Several event 4688s occur on your system when you log into a system. For example, Session ...