Unit 5: Windows event logs · Lesson 6 of 6 · 22 min Pro

Case file: one source, many hosts

Use the detection signals published after SolarWinds to spot a trusted server signing in everywhere and a task that deletes itself.