Windows Monitoring

Important for Event Logging

4698 to analyse scheduled task creation events. 4697 to detect service creation

Last updated