Archive

The Key Difference between “Account Logon” and “Logon/Logoff” Events in the Windows Security Log


An area of audit logging that is often confusing is the difference between two categories in the Windows security log: Account Logon events and Logon/Logoff events.  These two categories are related but distinct, and the similarity in the naming convention contributes to the confusion.

Webcast: MITRE ATT&CK® Framework

Webcast: MITRE ATT&CK® Framework

Learn how MITRE ATT&CK highlights adversarial techniques, and utilize this framework to improve your cybersecurity readiness.

Register Now