Optimizing windows 10 logging to detect network security threats

摘要

The collection and analysis of event logs allows detection and debugging of operating system and application configuration errors. An appropriate selection of event logs allows you to detect cyber-attacks and prevent potential damage. In the article, we focused on the selection and optimization of event logs for the Microsoft Windows operating system. We have experimentally verified the structure and amount of produced logs and we proposed their optimization.