Information Assurance Directorate: Spotting the Adversary with Windows Event Log Monitoring (Paperback) (ISBN-13: 9781508532323)

It is increasingly difficult to detect malicious activity, which makes it extremely important to monitor and collect log data from as many useful sources as possible. This paper provides an introduction to collecting important Windows workstation event logs and storing them in a central location for easier searching and monitoring of network health. The focus of this guidance document is to assist United States Government and Department of Defense administrators in configuring central event log collection and recommend a basic set of events to collect on an enterprise network using Group Policy.

Author: National Security Agency
ISBN-10: 150853232X
ISBN-13: 9781508532323
Publisher: Createspace Independent Publishing Platform
Language: English
Published: 06/26/2015
Pages: 56
Format: Paperback
Weight: 0.34lbs
Size: 11.02h x 8.50w x 0.12d