Netwrix: Top 10 Event Categories to Monitor in the Windows Server Event Log
Windows Server expert Russell Smith will walk you through different types of event that should be collected, including:
- Application whitelisting and Clearing Event Logs
- Account usage and Pass-the-Hash detection
- Remote Desktop logon use and Group Policy errors