Windows logs security event id 4624https://system32.eventsentry.com/security/event/4624 whenever a user logs on to a machine. Using the Hour/Day settings in an event log filter you can receive an email alert if someone logs in outside of normal working hours. 1. Ensure that 4624 eventshttps://system32.eventsentry.com/security/event/46...

KB-ID 511
Category: Security
Applies to: 5.1 and later

Overview This article explains how to use a PowerShell oneliner to calculate the average rate at which Windows Security events are being generated on a machine. This is expressed as Events Per Second EPS. Requirements PowerShell 3.0 or later. Must be run on the Windows machine being measured. Must be run from an elevated ...

KB-ID 545
Category: Event Log Monitoring