Security Log Defined

The most comprehensive and best-organized resource for Windows security events and auditing on the web. Discover how events correlate using insertion strings and review the associated audit instructions.

Browse All Events Domain Group Changes Users Workstation Lock / Unlock Logon / Logoff

Recommended Audit Policy Settings for:

Everyone Compliance Requirements Rare Instances

Windows Security Events for Compliance:

CMMC NIST 800-171 PCI-DSS HIPAA ISO 27001:2013 CJIS

Security Log

The Windows Security Event Log includes detailed records of login/logout activity and other security-related events specified by the system's audit policy. Windows records operating system activity in the Security Log.



Codes

We provide support for a broad range of error codes like your regular Windows errors, Task Scheduler Service, NTSTATUS errors, Windows Internet errors, STOP codes, BSOD errors, just to name a few.



Threat Intelligence

Easily resolve, view threat intel and pinpoint the geographic location of an IP address. Information includes the country, city and hostname along with the latitude and longitude.






Sysmon

Process Sysmon events audit system activity, capturing details such as process creation, image loads, network connections, file changes, and registry modifications. Process events include key forensic and threat detection data.



STIGs

The Security Technical Implementation Guide (STIG) provides prescriptive security controls for IT systems, specifying configuration baselines, hardening procedures, and compliance requirements.





Audit Policy Validator

Check your audit settings now

Validator
robot

Compliance Validator

Identify security configuration issues

Validator