Notes

Here’s an example of what I’m *not* trying to do – I don’t want to add more crap to home networks; I just want juicy juicy log data. And to be able to understand it:

https://www.sans.org/reading-room/whitepapers/hsoffice/protecting-home-devices-malicious-blacklisted-websites-36152

I’m definitely going to need to learn me some PowerShell to make this work – to dig through and make events sensible:

https://blogs.technet.microsoft.com/heyscriptingguy/2015/10/21/event-log-queries-using-powershell/

https://en.wikiversity.org/wiki/PowerShell/Event_Logs

https://4sysops.com/archives/search-the-event-log-with-the-get-winevent-powershell-cmdlet/