What2Log
The Logs
OS Tools
About Us
Log Blog
Windows 10 Professional
Minimum
User Logon
User Logoff
Account Created
Account Deleted
Account Changed
Software Installed
Software Updated
Group Creation
Group Change
Group Membership Change
Ideal
Failed User Login
Group Deletion
Service Installed
Software Uninstalled
Extreme
WiFi Connection
Application Opened
Application Closed
Linux Ubuntu
Minimum
User Logon
User Logoff
Account Created
Account Deleted
Software Installed
Software Updated
Group Creation
Group Membership Change
Ideal
Failed User Login
Group Deletion
User Logon
Windows 10 Professional
A users log in will likely be the first sign of an attack and can indicate suspicious behavior. It can also give an analyst a starting time to create a timeline of events.
