Blog Entries

13. 09. 2025 Mirko Ioris Blue Team, SEC4U

A Practical Guide to Working with Windows Authentication Logs – Part 2

Welcome back for the second and last part of our journey into the jungle of Windows logs! In the first part we set out our goal – tracking admin authentications – and learned more about Windows, how authentication events are logged, and where can we focus to isolate the most accurate events. Today we’re going…

Read More
25. 06. 2025 Mirko Ioris Blue Team, SEC4U

A Practical Guide to Working with Windows Authentication Logs – Part 1

If you’ve ever worked with Windows authentication logs, you know they can be a chaotic mess. Even when you’re looking for something apparently simple and useful – like tracking admin logins – you quickly find yourself in a sea of redundant entries, some of them logged for no apparent reason, and poorly documented details. I’ve…

Read More
02. 12. 2021 Omar Bertò APM, ITOA, NetEye

Really Slow Login? It’s Not Always the Network, It Might Be Your SQL Server

By using DMVmonitor to analyze query metrics on an MS SQL server instance, I was able to identify a missing index in the SQL server as the root cause of why an application was starting up quite slowly. In this specific case I was working in a production environment using Microsoft’s Dynamics AX 2012 R3…

Read More

Archive