Just a quick post to mention a spreadsheet i`ve put together, for some up coming articles on Windows Event Auditing with MARS.
In this spreadsheet which i hope to release to the user group first, and then Blog, i`ve expanded the knowledge of what MARS knows about certain Windows events, and correlated this with example Alerts and Microsoft explanations/NTLM error codes and Logon Types.
Posts
