Windows Event Logs Courses and Certifications

Cooper

Matching Windows Event Log IDs with MITRE ATT&CK

Explore Windows Event Log IDs and their correlation with MITRE ATT&CK framework, enhancing threat detection and incident response capabilities in cybersecurity.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Windows Event Logs - Zero to Hero

Comprehensive guide to mastering Windows Event Logs, covering analysis techniques, security implications, and practical applications for IT professionals and security enthusiasts.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Introducing DeepBlueCLI - A PowerShell Module for Hunt Teaming via Windows Event Logs

Explore Windows event log analysis for threat hunting with DeepBlueCLI, a PowerShell module. Learn about payload evolution, logging processes, and practical use cases for enhanced cybersecurity.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Windows Event Logs - Zero to Hero

Comprehensive guide to Windows Event Logs, covering forwarding, analysis, and practical applications in cybersecurity, with real-world examples and best practices.

• YouTube
• 56 minutes
• On-Demand
• Conference Talk

Windows Event Logs - Zero to Hero

Comprehensive guide to leveraging Windows Event Logs for security monitoring, from basic concepts to advanced techniques for threat detection and incident response.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

Splunk Fundamentals: Level 2 (Live Online)

8 ratings at CourseHorse

Elevate your Splunk skills with our Level 2 course, designed to deepen your understanding of data capture, indexing, and visualization techniques.

• CourseHorse
• 13 hours
• On-Demand
• $995.00

Security BSides London

Forensicating Windows Artifacts - Investigation Without Event Logs

Discover essential Windows artifacts for forensic investigations without event logs. Learn to leverage prefetch files, registry keys, and browser data for effective incident response.

• YouTube
• 18 minutes
• On-Demand
• Conference Talk

Learn to configure Windows Event Forwarding for threat detection, collect events from servers and workstations, and use MITRE ATT&CK framework to hunt for malicious activities like Lateral Movement.

• Cybrary
• 1-2 hours
• On-Demand
• Paid Course

Getting Back to the Old School

Explore old-school cybersecurity techniques, emphasizing manual analysis, critical thinking, and foundational skills to complement modern tools and stay ahead of evolving threats.

• YouTube
• 22 minutes
• On-Demand
• Conference Talk

nullcon

A New Secret Stash For Fileless Malware

Explores advanced fileless malware techniques using Windows event logs for code hiding and infection. Reveals new methods to conceal shellcode and manipulate logging functions.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Black Hat

What the Log - So Many Events, So Little Time

Explore Windows Event Log for efficient adversary detection, leveraging automation and MITRE ATT&CK framework to enhance cybersecurity monitoring and response capabilities.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

BasisTech

Windows Event Log Trick-Shots in Rust

Discover advanced techniques for processing Windows event logs using Rust, including fast large-scale searching, recovering records from empty pages, and leveraging open-source tools for forensic analysis.

• YouTube
• 33 minutes
• On-Demand
• Conference Talk

Fluent Bit 1.9 - First Mile Observability for Cloud Native Environments

Explore Fluent Bit 1.9's latest features for enhanced observability, including improved container support, new plugins, and optimized performance for efficient log and metric collection.

• YouTube
• 36 minutes
• On-Demand
• Free Video

What Can My Logs Tell Me - Art Petrochenko

Explore various log types for forensics and security analysis, covering Windows domains, network traffic, firewalls, and authentication. Learn practical tips and tools for effective log parsing and investigation.

• YouTube
• 1 hour 1 minute
• On-Demand
• Conference Talk

BSidesLV

Windows EventLog Persistence Techniques for Red Team Operations

Explore Windows environment exploitation techniques, including bypassing constrained language, XML file abuse, and EventLog persistence, with a focus on red team operations and defense strategies.

• YouTube
• 32 minutes
• On-Demand
• Free Video