> Resources > WinSecWiki

This primary content area of WinSecWiki provides in-depth coverage of the poorly understood, poorly documented, shadowy evirons of the Windows Security Log. There are 2 major versions of the Windows security log: pre-Vista and post-Vista. With Vista and Windows Server 2008 all the event IDs change, you get audit subcategories, a new XML format and more.

• Windows Server 2000, XP and 2003 Server

• Windows Vista and Windows Server 2008

For a list of all Security Log Events (several hundred), click here.

Edit

This section of WinSecWiki

I've made every effort to produce every security event in all versions of the Windows Security Log. For each event I try to provide:

• Concise explanation of what the event means and when it gets logged.
• One or more examples from actual logs
• Explanation of each field in the description and documentation of arcane code values