A Security Expert's Guide: The Windows Events You Should be Tracking and Why

Are you able to identify who is doing what across your Windows servers? How well are you able to audit and report on events across all your privileged accounts? One of the ways to monitor such activities is to centralize the events so they can be read from one location. But what events should you be tracking in the first place and why?

Join Windows Security Expert and MCSE, Russell Smith, who will discuss the Windows Events you should be tracking right now and why. He will also show you how to set up Event Log subscriptions so you have better monitoring across your Windows environments. Additionally he will cover:

• What types of Windows events you should be tracking (account creation, Security services disabled, RDP enabled, etc.)
• What kind of information is recorded in Windows Event Logs and why they should be monitored
• How to view Windows Event Logs

BeyondTrust’s, Morey Haber will then walk attendees through a brief overview of PowerBroker for Windows and how the product can effectively track the Windows events Russell discusses earlier. This is a webinar you don’t want to miss!

Russell Smith, IT Consultant & Security MVP

Russell Smith specializes in the management and security of Microsoft-based IT systems. In addition to blogging about Windows and Active Directory for the Petri IT Knowledgebase, Russell is a Contributing Editor at CDW’s Biztech Magazine.

Russell has more than 15 years of experience in IT, has written a book on Windows security, co-authored one for Microsoft’s Official Academic Course (MOAC) series and has delivered several courses for Pluralsight.