Windows Event Logs

Walkthrough summary

Windows Event Logs TryHackMe walkthrough with 31 answered prompts and lab methodology notes.

Sample prompts covered

• What is the Event ID for the earliest recorded event?
  Open the walkthrough page to inspect the full answer and command flow.
• Filter on Event ID 4104. What was the 2nd command executed in the PowerShell session?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the Task Category for Event ID 4104?
  Open the walkthrough page to inspect the full answer and command flow.
• Analyze the Windows PowerShell log. What is the Task Category for Event ID 800?
  Open the walkthrough page to inspect the full answer and command flow.
• How many log names are in the machine?
  Open the walkthrough page to inspect the full answer and command flow.