Tag Info

New answers tagged

0

If you setup log management and send event logs as syslogs, as seen in the following document -- then you can monitor for IoCs (or hunt through the events). http://www.sans.org/reading-room/whitepapers/logging/detecting-security-incidents-windows-workstation-event-logs-34262 For example, if Flash crashes, EMET alerts, or your AV describes a particular ...



Top 50 recent answers are included