Question: The objective of this exercise is learning how to parse and analyze the logs on a Windows Operating System during an incident response investigation. 5.

The objective of this exercise is learning how to parse and analyze the logs on a Windows Operating System during an incident response investigation.

5. You are a security consultant about to go on sight to present to a CIRT team for a new company they have requested that you provide step-by-step instructions on how to install Splunk on a windows system and parse security event logs within Splunk. You may have to use another tool to export the logs to a csv file format. Log explore is good for this. Please, provide screenshot of the logs from your system being parsed. Working together on this question is okay but each person must provide a screen shoot of the tool working with there logs. PLEASE REMEMBER TO PARSE SECURITY EVENT LOGS WITHIN SPLUNK!!!!

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!