ConceptsEvents

Events

Individual records of something that happened on a system or network, a logon, a connection, a file change, that are logged and analyzed. Events are the raw units of telemetry that detection and investigation are built on.

Glossary definition

7 direct links6 lessons

Concept Neighborhood

Explore this concept’s connections in the groups below.

PrerequisiteRelated

Start here

Application Logs

A related concept to explore, covered by 6 lessons.

Open concept →

Builds towardEvents is a foundation for these

Alert Volume

The total number of alerts a monitoring system generates over time. When volume outpaces the team's capacity, important alerts get buried and analysts experience fatigue, so managing volume is central to effective detection.

lesson

Relatedsorted by lesson coverage

Application LogsStart here

lessons

Detection Coverage

lessons

Logs

lessons

Structured Logging

lessons

Event IDs

lessons

Enrichment

lesson

Related Lessons

6 lessons cover this concept

Design Security Telemetry

General Beginner

Build Reliable Source Coverage

General Beginner

Protect the Telemetry Pipeline

General Beginner

Store, Query, and Govern Telemetry

General Beginner

Make Telemetry Detection-Ready

General Beginner

Operate and Improve Telemetry

General Beginner