Logon session auditing can be tricky. The good news: The data is in the security log. The bad news: The actual events denoting the beginning and end of a logon session are not in the domain controller log.
Join us for this technical webinar with Ultimate Windows Security where we’ll discuss two ways to track logon sessions and how a UEBA solution can help make sense of this complex data:
- Workstation Logs: Less complicated, but more log collection heavy.
- Domain Controller Logs: More sophisticated analysis capabilities, but less log management needs.
