User login activity is critical with intrusion investigations because user accounts are often compromised and used for lateral movement. On any given host, you are looking at who came into the host and who left it. Unfortunately, logons are extremely complicated and you’ll need to review several event logs, event types, and registry keys to get the full picture. This webinar will cover the logical steps of logons and then dive into events that occur at each step. We’ll then be able to identify patterns of login activity to identify anomalous hosts and user accounts.
Virtual Event
- This event has passed.
Jun
28
Webinar: User Login Forensics – Merging Artifacts To Find Anomalous Activity
June 28, 2023 @ 11:00 am - 12:00 pm
Virtual Event
Event Navigation
