SN28: The All New Windows 2008 Event Log

Document created by jmerrill on Sep 28, 2009Last modified by jmerrill on Jul 8, 2014
Version 3Show Document
  • View in full screen mode
The All New Windows 2008 Event Log
Speaker: Doron Keller, Senior Solutions Engineer-ArcSight
In Windows 2008 and Vista, Microsoft revamped their event log. They introduced many more audit categories and a whole new event ID schema, as well as modified the information included in the events. This session will highlight the new features of the Windows 2008 event log, compare it to the Windows 2003/XP event log, point out the challenges and suggest solutions. This session is a must for anyone who has Windows-based servers in their environment and would like to maximize the value that is concealed in their logs.
Level: Intermediate