Tools & Defense Security Logging and Monitoring: What to Collect and Why
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Event Logs
Tools & Defense 
Active Directory Kerberoasting and AS-REP Roasting Detection Deep Dive
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Windows Telemetry: Sysmon vs ETW vs the Security Log
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Windows Event Log Analysis for Incident Responders
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Sysmon Configuration for Endpoint Visibility
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Windows Privesc Windows Event Logs and Forensic Artifacts: Tracking and Tampering
How Windows Security event logs record attacker activity, how adversaries clear them, and how defenders detect tampering.