Course

Windows Event Log Analysis

15 HFC or HackFury Pro

DFIRdefensivebeginner

Chapters

13

Questions

20

Players finished

0

About this course

You should be comfortable navigating a Windows desktop, opening applications, and using basic command-line tools, but you do not need any prior security or forensics background. You do not need Sysmon installed or a SIEM available; every example in this course reads logs Windows already generates on its own, though Lesson 7 introduces Sysmon as an optional enhancement. This course will not teach you to build a...

Unlock it with 15 HFC, or get every paid lab and course with HackFury Pro.

Skills you practice

Difficulty: Beginner

  • Defensive security

What the course covers

  1. Prerequisites
  2. Purpose
  3. Concept Map
  4. Abbreviations
  5. Terminology
  6. Core Lessons
  7. Danger Zone
  8. Real World
  9. Scope
  10. Readiness Checklist
  11. FAQ
  12. Key Takeaways
  13. Summary

More courses

Also on HackFury: hands-on labs, CTF events, FurySOC blue team practice, certifications, and managed bug bounty programs.