What2Log @What2Log
Logging made easy Project of @ISInnovations | Ran by @soundsofthetime and @BetterSafetyNet Cyber Space Joined August 2020-
Tweets29
-
Followers619
-
Following11
-
Likes140
Happy What2Log Wednesday! New logs on the site this week: Windows starting up (4608), Windows Locked & Unlocked (4800 & 4801), and Screen saver invoked & Dismissed (4802 & 4803). Check them out at what2log.com/windows/
We have also added a few new logs from Windows Appendix L. We have added 5 logs relating to scheduled tasks!
Exciting mini-update for What2Log! We now sort our left tab by log source! This should help guide use of the site. We also have organized the landing page for each Operating System meaning you can get directly to the logs you want quicker!
Exciting News! W2L Version Ash is now live. This means W2L's content is now entirely in .toml and that *you* can contribute! Check out the repo at: github.com/InfoSecInnovat…
Working on some fun things behind the scenes... What2Log is converting to a toml driven format to allow for easy community contribution. Stay Tuned!
We have had an amazing outpouring of support and we know you want to help! We now need to find out what method would work best for you to get your ideas to us.
On tomorrow's Hackin' Cast, @bettersafetynet will discuss What2Log, a free project by @ISInnovations that makes logging easier. Mick will talk about what to log, how to set it all up, and even give you ideas of why you should log it. Register: register.gotowebinar.com/register/40020…
Listen to What2Log on the Sans #BlueprintPodcast and get a bit more of a deep dive into the ideals behind W2L!
🚨🎙️ NEW #BlueprintPodcast LIVE Which logs are the most important? In this episode, @bettersafetynet @soundsofthetime join @SecHubb to describe their #What2Log project, which aims to simplify this problem for all of us! Listen Now: sans.org/u/14p6 #Podcast #InfoSec
New blog post! This week, we explore Event Record ID and what it means for the log in Windows. Check it out at blog.what2log.com
Infosec folks. HIPAA regs seem very loose. We're trying to fold it into what2log.com and are struggling. Is there a concrete roadmap of what must be logged for HIPAA/HITECH?
In order to avoid confusion with Sawmill, the log file analysis tool, we will be renaming our Sawmill! If you have any suggestions (especially punny ones), please drop them below!
Interested in what's happening in What2Log.com? We have posted our weekly task list. reddit.com/r/What2Log/com…
@JayInfoSec We do have it! It is currently pending a name change to Process Creation, but it can be found here: what2log.com/logs/windows10… As far as capturing command line, we are working on that!
This Week on What2Log we have a blog post coming up today! Behind the scenes, we're digging into HIPAA Guidelines and what it means for logging. We're also continuing our event generation for Mac Catalina to add that to the site soon!
Did you catch the What2Log webinar with @SANSDefense? If not, catch it now on YouTube! youtube.com/watch?v=JSEGfY…
Thank you to everyone who attended the webinar about What2Log! This is a wild ride that is just getting started and we are excited to have everyone here! sans.org/webcasts/life-…
@zenrandom @bettersafetynet Aw shucks, thank you!
⚠ONE HOUR TO GO!⚠ Join @bettersafetynet and Flynn Weeks for a rundown of What2Log.com Register now: sans.org/u/1a4o
OK forensics folks! What are some events you'd like to see from Mac logs? Here's the working list I have right now. User created User login/logoff (success & fail) group create group change sudo use app install/delete Please RT! Thanks in advance.
Mick Douglas 🇺🇦... @bettersafetynet
32K Followers 574 Following Consultant for InfoSec Innovations | @SANSInstitute Principal Instructor | @IANS_Security Faculty | I like information security. How about you?
Jake Williams @MalwareJake
150K Followers 2K Following Breaker of software | VP R&D @hunterstrategy | CTI/DFIR | @ians_security faculty | Bookings: jake at malwarejake dot com | GSE #150 | He/him
John Hammond @_JohnHammond
322K Followers 3K Following Cybersecurity Researcher @HuntressLabs Just Hacking Training @JustHackingHQ w/ @ethicalhacker https://t.co/UtsNJiyQtS && https://t.co/narO3sz7y6
Nasreddine Benchercha... @nas_bench
12K Followers 1K Following Detection @Splunk & @cisco | previously @nextronsystems | @sigma_hq & @magicswordio maintainer | Eternal Learner
Charles Shirer @bsdbandit
25K Followers 27K Following A Hacker who is A Lover of People, and Life @RetroTwinz @Secbsd, @GrumpyHackers, @NovaHackers, @deadpixelsec @hacknotcrime Advocate @PositivelyBlue_ OSCP, OSWP
Jon Gorenflo 🇺🇦... @flakpaket
3K Followers 1K Following Family Man, Army Vet, Consultant, Founder @StartATTACKD, @SANSInstitute Principal Instructor, @hthackers Director.
Eder Bruno @EderBruno20
8 Followers 259 Following
Rishi @rishagg01
335 Followers 1K Following First Generation Legal Immigrant, living the American Dream. Software Programmer, Small Business Owner. #MAGA since 2016 #AmericaFirst 🇺🇸
Neethou @NeethourwysQB
49 Followers 882 Following
Peter Schawacker @PeterSchawacker
984 Followers 8K Following Cyber Business Innovator & Strategist | CISO | AI | GRC & SOC | DFIR/TTX | SecOps | Drive Margin | Nearshoring | LATAM-USA | Emerging Markets | GTM Advisor
Storm Booe @booestorm1
49 Followers 832 Following Just here to read about nerd things and talk trash about sports. Maroon and gold glasses wearing Gopher wrestling fan and fan of all MN sports.
Ryan Platten @rp1atten
305 Followers 1K Following Professional Googler of all the things / Do stuff @binary_defense / Dad / Tweets are mine. ☧
Warfolomei_1920 @1920Warfolomei
0 Followers 73 Following
Jerome @H3Jerome
32 Followers 269 Following
Richard Rowlandson @rrowlandson
107 Followers 452 Following Threat Hunting, Malware Analysis, DFIR, Dad Jokes, Outdoors Thoughts & Opinions = Mine
Amarjit Singh @amarghuman
2K Followers 5K Following Technology Strategy, Security by Design, Security Architecture, and Service Design. Army veteran and photographer.
Danzo @dafpoo
166 Followers 1K Following DevOps Engineer | CTO @ KOSHU | Cybersecurity Writer & Educator (He/Him/His)
Wolfgang Reidlinger @w_reidlinger
3 Followers 185 Following
Jens Groth Andreasen @jgandreasen
22 Followers 141 Following Interesseret i arbejdsmarked og politik generelt.
Patrick Mal @smeg_he4d
2 Followers 80 Following
Matt Zulkoski @MattZulkoski
165 Followers 190 Following Network Admin. Professional haver of too many hobbies. #LetsMotor
Devin Dulay @Dmdulay6973
3 Followers 159 Following
Andy Gittins @4ndyGit
17 Followers 236 Following
meer hamza @meerhmza0
6 Followers 124 Following Security Engineer works as blue teamer and thinks like a red teamer. Like to learn and investigate spooky stuff.
Chris Ahearn @sudochrisahearn
143 Followers 441 Following Husband, Father, IR guy. Just trying to fight the good fight and enjoy life with family and friends along the way.
sajal verma @sajalpentest
216 Followers 2K Following Trying hard to learn Web/mobile app sec. Opinions are personal. Passionate about personal finance.
theau @thefractis
25 Followers 556 Following
CyNile @mohamedramaadan
2 Followers 94 Following
Ashokkrishna(le0li9ht... @ashokkrishna99
533 Followers 2K Following SOC Lead | Microsoft Sentinel SME | ThreatHunting|Threat Intelligence |OSINT|Darkweb |DFIR|Linux Lover | Azure| KQL|Threat Simulations
csgaee @csgaee
130 Followers 2K Following Malware researcher @EG_CERT | threat intelligence @nowhere_reallll
NecroNetRunner @NetNecRun
8 Followers 449 Following
Hannon Sparks @HannonSparks
142 Followers 403 Following
Haif @itsjusthaif
32 Followers 165 Following Avid Traveller | Motorsport Enthusiast | Cyber Security Professional. Mainly here for cybersec news and discussions.
a muppet @FeMaven
906 Followers 4K Following interested in tech, insider threat, analytics, running, cycling, rock climbing. opinions =my own. he/him
r_infosec_feed @r_infosec_feed
0 Followers 96 Following
Mapache. @Hamorpatos
14 Followers 402 Following
jerry_yan @jerry_yan
463 Followers 96 Following
Sudosid @sudosid
1 Followers 961 Following
rcegan @rcegann
652 Followers 768 Following senior security engineer/threat detection lead @ mssp. Hack the planet.
Prout Prout KK KK @KKProut
3 Followers 1K Following
Mick Douglas 🇺🇦... @bettersafetynet
32K Followers 574 Following Consultant for InfoSec Innovations | @SANSInstitute Principal Instructor | @IANS_Security Faculty | I like information security. How about you?
Black Hills Informati... @BHinfoSecurity
49K Followers 2K Following Specializing in pen testing, red teaming, and Active SOC. We share our knowledge through blogs, webcasts, open-source tools, and Backdoors & Breaches game.
Tim Medin @TimMedin
18K Followers 595 Following Kerberoast Guy • @RedSiege CEO • IANS Faculty • Former SANS SEC560 Author, Senior Instructor • Packers Owner #GoPackGo • Work Req: https://t.co/ALJldLMDfZ
Charles Shirer @bsdbandit
25K Followers 27K Following A Hacker who is A Lover of People, and Life @RetroTwinz @Secbsd, @GrumpyHackers, @NovaHackers, @deadpixelsec @hacknotcrime Advocate @PositivelyBlue_ OSCP, OSWP
ATT&CK @MITREattack
117K Followers 514 Following MITRE ATT&CK® - A knowledge base for describing the behavior of adversaries. Replying/Following/Re-tweeting ≠ endorsement. @ https://t.co/wt46ArkZVt
ʎʇɹǝɟɟɐꓶ uo�... @zenrandom
1K Followers 2K Following Technical/Operational Debt Collector, IT Archaeologist, making the simply ridiculous absolutely ludicrous . Copied my opinions from person next to me.
Wild West Hackin' Fes... @WWHackinFest
14K Followers 479 Following Join us for Wild West Hackin' Fest - Deadwood 2026! Con: Oct. 7-9, 2026, Pre-Con Training: Oct. 6-7, 2026
John Hubbard @SecHubb
6K Followers 903 Following Cyber Defense Author & Instructor @SANSInstitute - SEC450/LDR551 | https://t.co/6NusGJa7bk
Flynn 👻👽 @soundsofthetime
183 Followers 157 Following Basically a 25 year old grandma 🤙 | it’s just me and my dogs 🐶 | ARGHouse
SANS Cyber Defense �... @SANSDefense
38K Followers 497 Following Home of the Cyber Defense curriculum of @SANSInstitute, a hub for #CyberDefense, #BlueTeam, and #OSINT info, training, media, community, and events.
InfoSec Innovations @ISInnovations
73 Followers 1 Following Security company focusing on providing creative solutions to common security problems.Trends for United States
You might like
