Tools & Defense Lateral Movement Detection: SMB, WMI, and WinRM
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Sysmon
Tools & Defense 
Tools & Defense Windows Telemetry: Sysmon vs ETW vs the Security Log
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Windows Event Log Analysis for Incident Responders
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Sysmon Configuration for Endpoint Visibility
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Windows Privesc Windows Event Logs and Forensic Artifacts: Tracking and Tampering
How Windows Security event logs record attacker activity, how adversaries clear them, and how defenders detect tampering.