- MYSTERY: Restored VM with no network adapter connected, and Time Sync turned off > VM has current time https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventID=4616 19 comments sysadmin
- Built a tool that tracks down bad password events on domain controllers. Hoping to get feedback. https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventID=4771 15 comments sysadmin
- Every Windows Security Event Log Documented http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/default.aspx 4 comments netsec