digirati82

Windows Logging Service (WLS), DFIR, etc.

Skip to content
  • Home
  • WLS Information
    • WLS Presentations
    • WLS Screenshots
    • WLS Videos
  • WLS Licensing and Questions
  • Example WLS Splunk Searches
  • About Me
  • Disclaimer

WLS Presentations – NLIT 2014

This slideshow requires JavaScript.


WLS – The Cyber Security Ninjas Throwing Star – NLIT (pptx)

Contact Me!

Contact Form
Google+
LinkedIn
Twitter

WLS Information

Licensing
Licensing Information
WLS Summary (pdf)

Presentations
2016 Splunk .conf (pdf)
2016 SplunkLive! Scottsdale
2016 NLIT (pdf)
2015 SplunkLive! Santa Clara
2015 Splunk.conf (pdf)
2015 DerbyCon
2015 NLIT (pdf)
2014 NLIT
2010 Splunkified - The Next Evolution of Log Analysis (pdf)

Media
Screenshots
Videos

Recent Posts

  • Event logs with control characters July 13, 2017
  • WLS 3.5 Released! October 17, 2016
  • Determine if a Smart Card Was Used for Logon November 18, 2015
  • WLS 3.4 Released! October 30, 2015
  • Windows 7/2008 + RDP8 = Incorrect source network address October 5, 2015

Archives

  • July 2017
  • October 2016
  • November 2015
  • October 2015
  • July 2015
  • May 2015
  • December 2014
  • September 2014
  • June 2014
  • May 2014
  • April 2014
  • December 2013
  • October 2013
  • September 2013
  • August 2013
  • July 2013
  • June 2013
  • March 2013

Blogs I Follow

  • NTT Security RSS - Your Information Security Blog
  • Information on Security
  • CyberGuardians
  • pwnag3
  • Still Passing the Hash 15 Years Later
  • The Crazy Hat Box
  • www.fireeye.com/blog
  • Click Security
  • MalwareTech
  • Hacker Hurricane
  • Ghetto Forensics
  • Information Security
  • TaoSecurity
  • Context Information Security Blog
  • Sucuri Blog
  • Strategic Cyber LLC
  • Journey Into Incident Response
  • A Geek Raised by Wolves
  • Uncommon Sense Security
  • WhiteHat Security Blog

Tags

3.0.0.57 3.0.0.58 AntiSpyware AntiVirus BlueCoat Catalog certificate Class Comma-separated values command command line parameters command line paramters Command Monitor configuration device disk drive Drive Monitor event logs File attribute Firewall handle hash hashes Infection Interactive User json Licensing loaded modules Log Analysis Log Backfill logs lookup Lookup table Malware MD5 MemberName memory Microsoft Windows modules mutex Named pipe network new features ParameterMessageFile PID plug and play pointer port process Process auditing provider registry Regular expression RIPEMD Security semaphore server Session Monitor SHA-1 Signed Binary Detection Splunk structure Subclass syslog tag tagging USB version VID virtual address Windows Windows Management Instrumentation WLS wmi
Create a free website or blog at WordPress.com.
NTT Security RSS - Your Information Security Blog

Windows Logging Service (WLS), DFIR, etc.

Information on Security

Windows Logging Service (WLS), DFIR, etc.

CyberGuardians

Windows Logging Service (WLS), DFIR, etc.

pwnag3

Windows Logging Service (WLS), DFIR, etc.

Still Passing the Hash 15 Years Later

Windows Logging Service (WLS), DFIR, etc.

The Crazy Hat Box

there's a hat for that!

Windows Logging Service (WLS), DFIR, etc.

Click Security

Windows Logging Service (WLS), DFIR, etc.

MalwareTech

Windows Logging Service (WLS), DFIR, etc.

Hacker Hurricane

Windows Logging Service (WLS), DFIR, etc.

Ghetto Forensics

Windows Logging Service (WLS), DFIR, etc.

Information Security

Windows Logging Service (WLS), DFIR, etc.

TaoSecurity

Windows Logging Service (WLS), DFIR, etc.

Context Information Security Blog

Windows Logging Service (WLS), DFIR, etc.

Sucuri Blog

Protect Your Interwebs!

Strategic Cyber LLC

A blog about Armitage, Cobalt Strike, and Red Teaming

Journey Into Incident Response

Windows Logging Service (WLS), DFIR, etc.

A Geek Raised by Wolves

Windows Logging Service (WLS), DFIR, etc.

Uncommon Sense Security

Windows Logging Service (WLS), DFIR, etc.

WhiteHat Security Blog

Cancel