Resources for the Cryptic Windows Security Log

• Uncovering Endpoint Compromise in Ransomware Attacks: Using Velociraptor to Investigate, Monitor, and Remediate Threat Activity
• Why SIEM is Difficult