Cyber Security Interview Questions and Answers › Cyber Security
Which Windows Event IDs should a SOC analyst know?
An Event ID is a number Windows gives each kind of log entry. They live in the Security log (Event Viewer). These IDs are the first clues in many Windows attacks.
Read card text
What this card says
An Event ID is a number Windows gives each kind of log entry. They live in the Security log (Event Viewer). These IDs are the first clues in many Windows attacks.
Learn more in the lesson: 31.2 Where Logs Live