Incident responders and blue teams have a new tool called Chainsaw that speeds up searching through Windows event log records to identify threats. The tool is designed to assist in the first-response ...

The Performance Analysis of Logs or PAL tool is a free offering from Microsoft’s CodePlex site. PAL reads performance counter logs, analyzes them and reports on the thresholds using HTML based reports ...

Last week I looked at some creative uses of log analysis for detecting malware, and ways to acquire Windows physical memory for analysis. What I've seen time and time again is where those in charge of ...

In brief: The Windows event log and Event Viewer are supposed to help users diagnose security issues and other problems in PCs. However, Kaspersky researchers encountered one hacker who used the event ...