Home >

Cyber Defense CTF > Log_analysis

Back <> Next

For these challenges, you can refrence This table

Name that event 1

I failed to log on. What event ID am I?

4625 - An account failed to log in

Answer: 4625

Name that event 2

I am newly scheduled. What event ID am I?

4698 - A scheduled task was created

Answer: 4698

Name that event 3

I’m up and off to work. What event ID am I?

4688 - A new process has been created

Answer: 4688

Name that event 4

I can’t remember a thing. What event ID am I?

1102 - The audit log was cleared

Answer: 1102

Back <> Next