[HINDI] Important Windows Event IDs Every SOC Analyst Must Know | Part-2

In this video, I explained more important Windows Event IDs that every SOC Analyst should know.

Covered Event IDs:
- 4720 – User Account Created
- 4723 – Password Change Attempt
- 4626 – User/Device Claims Information
- 4728 – User Added to Security Group
- 5140 – Network Share Access

These logs are important for detecting suspicious activities like account creation, privilege escalation, and lateral movement.

📚 Useful Resources:
👉Event ID Guide:
https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/

🎥 Watch Part 1:
https://www.youtube.com/watch?v=lcstZ7-iLxE&t=6s

#cybersecurity #socanalyst #windowslogs #eventid #infosec

Видео [HINDI] Important Windows Event IDs Every SOC Analyst Must Know | Part-2 канала Byteshield01