1.2 Native Windows Event Forwarding

Video Activity

Join over 3 million cybersecurity professionals advancing their career

Sign up with

Required fields are marked with an *

or

View all SSO options

Already have an account? Sign In »

Threat Hunting with Windows Event Forwarding

Course

Time

1 hour 21 minutes

Difficulty

Beginner

CEU/CPE

2

Up Next

2.1 Group Policy for Event Collection

2.2 Microsoft System Monitor (SysMon)

2.3 Which Events to log for the Threat Hunt Part 1

2.4 Which Events to log for the Threat Hunt Part 2

3.1 Configure Windows Event Collector (WEC) Part 1

Instructed By

Gurvinder Singh

Gurvinder Singh

Information Security Manager at American Psychological Association

Similar Content

Event Log Collection

Event Log Collection

In this lab you will use Splunk Enterprise to ingest logs from a local host ...

Identifying Intrusion and Mitigating Attacks with RHEL Server

Identifying Intrusion and Mitigating Attacks with RHEL Server

This last lab is similar to the Windows Incident Response lab, but different in that ...

Creating SIEM Reports with Splunk

Creating SIEM Reports with Splunk

Students will walk through the creation of SIEM reports using the SPLUNK tool.