---
id: 9689
title: "Uncovering Windows Events"
source_domain: specterops.io
source_url: "https://specterops.io/blog/2023/03/15/uncovering-windows-events/"
published_at: "2023-03-15T16:01:44Z"
phying_url: "https://phying.com/item/9689"
lang: en
---

# Uncovering Windows Events

## Summary

This post will focus on the process I followed to understand the events the Threat-Intelligence ETW provider logs and how to uncover the underlying mechanisms.

## Intelligence Metadata

- **Sources:** specterops.io
- **Published:** 2023-03-15T16:01:44Z
- **Original:** https://specterops.io/blog/2023/03/15/uncovering-windows-events/
- **Phying News:** https://phying.com/item/9689