Evading Logging and Monitoring

Walkthrough summary

Evading Logging and Monitoring TryHackMe walkthrough with 15 answered prompts and lab methodology notes.

Sample prompts covered

• What ETW component will build and configure sessions?
  Open the walkthrough page to inspect the full answer and command flow.
• What event ID logs when a user account was deleted?
  Open the walkthrough page to inspect the full answer and command flow.
• How many total events can be used to track event tampering?
  Open the walkthrough page to inspect the full answer and command flow.
• What event ID logs when the log file was cleared?
  Open the walkthrough page to inspect the full answer and command flow.
• What reflection assembly is used?
  Open the walkthrough page to inspect the full answer and command flow.