DuckIntel / Security Tools
Browse 173 Windows security event IDs across 10 categories: Security, Sysmon, PowerShell, WinDefender, RDP, and more. With investigation tips.
Browse 173 Windows security event IDs across 10 categories: Security, Sysmon, PowerShell, WinDefender, RDP, and more. With investigation tips.
173 Windows security events across 10 categories: Security, Sysmon, System, PowerShell, WinDefender, RDP, AppLocker, WMI, Network, Task Scheduler. Each with investigation guidance.
Windows Event ID Reference is part of DuckIntel, a free browser-based cyber intelligence platform with 59 security tools for SOC analysts, IT administrators, and security professionals. No login or account is required. All tools run entirely in your browser — your data never leaves your machine.
Related tools
Part of DuckIntel.io — 59 free browser-based security tools for SOC analysts. No login. No tracking. 100% client-side.