SOC Analysis

Windows Event Viewer (Quick Notes)

windows · event-viewer · soc

Which Event ID is generated when event logs are removed? Event Id 104 Which Event ID is associated with Process Execution activity? In this case, Event ID 4688 will be helpful.