I'm writing a Windows app in unmanaged C++ and want to log some simple events to the Application log. I'm normally a *nix guy and am used to being able to just call syslog() (or asl(3) on Mac OS X). I ...

If the Event ID 1108: The event logging service encountered an error keeps troubling you, this post could help you. When this error occurs, your computer may behave ...

If you want to enable or disable Protected Event Logging in Windows 11 and Windows 10, this step-by-step guide helps you go through the process. However, you must include an Encryption certificate if ...

My SQL Server is logging all logins to the system.<BR><BR>This obviously creates a bit more log traffic than one would normally get otherwise.<BR><BR>Two questions really:<BR><BR>1. Any reason I can't ...

Incident responders and blue teams have a new tool called Chainsaw that speeds up searching through Windows event log records to identify threats. The tool is designed to assist in the first-response ...

The default event logging in Windows 10 won't give you enough information to properly conduct intrusion forensics. These settings and tools will help you collect the needed log data. After a ...

This publication defines a baseline for event logging best practices to mitigate cyber threats. It was developed by the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) ...

An excellent PowerShell script is easy to troubleshoot when something goes wrong. When developing scripts, it's important to not just consider "working" a symbol of success but also that you have ...

Have you ever needed to look for a certain event with the Event Viewer logs? If you did, you probably went through the normal method – opening the Event Log viewer, and performing a filter on the ...