Part I: Introduction to Windows Security Monitoring
by Andrei Miroshnikov
Windows Security Monitoring
- Cover
- Title Page
- Introduction
- Part I: Introduction to Windows Security Monitoring
- Part II: Windows Auditing Subsystem
- Part III: Security Monitoring Scenarios
- CHAPTER 4: Account Logon
- CHAPTER 5: Local User Accounts
- CHAPTER 6: Local Security Groups
- CHAPTER 7: Microsoft Active Directory
- CHAPTER 8: Active Directory Objects
- CHAPTER 9: Authentication Protocols
- CHAPTER 10: Operating System Events
- CHAPTER 11: Logon Rights and User Privileges
- CHAPTER 12: Windows Applications
- CHAPTER 13: Filesystem and Removable Storage
- CHAPTER 14: Windows Registry
- CHAPTER 15: Network File Shares and Named Pipes
- APPENDIX A: Kerberos AS_REQ, TGS_REQ, and AP_REQ Messages Ticket Options
- APPENDIX B: Kerberos AS_REQ, TGS_REQ, and AP_REQ Messages Result Codes
- APPENDIX C: SDDL Access Rights
- End User License Agreement