Windows Authentication Activity Analysis

Logging of activity of any kind is useless without an effective process to distill useful information from clutter. This presentation will cover how to capture, understand, and analyze user authentication records on Windows systems to assist in both routine and incident response scenarios.