PowerShell EventLog CmdLets
PowerShell provides built-in **EventLog cmdlets** for collecting and inspecting Windows event logs. The most commonly used cmdlet is **Get-EventLog**, which retrieves events from …
#event-logs
2 published notes
Convergent vs Divergent Thinking in DFIR
# Convergent vs Divergent Thinking in DFIR These two thinking modes are the mental engine behind every good investigation. ## Divergent thinking Cast a wide net. You do not know…