ConceptsEvent IDs
Event IDs
Numeric codes that identify specific event types in Windows logs (such as 4624 for a logon), letting defenders search for, filter, and build detections around particular activities recorded by the operating system.
7 direct links2 lessons
Concept Neighborhood
Explore this concept’s connections in the groups below.
Related · bigger circles cover more lessons
Start here
Sysmon
A related concept to explore, covered by 8 lessons.
Relatedsorted by lesson coverage
SysmonStart here
8
lessons
Cloud Audit Log
7
lessons
Endpoint Telemetry
6
lessons
Events
6
lessons
Logs
6
lessons
Process
6
lessons
Show 1 more connection
Related Lessons
2 lessons cover this conceptProcesses, Users, and the Idea of Security Context
General Beginner
Windows Essentials for Defenders
General Beginner
Sign in to open lesson content directly.