I’m doing the exercise 1.2 of Windows Event Logs, and I’m having trouble with the question 2: “According to the Event Viewer, what time was the new account created?”. I found the date inside the Security, but my answer still wrong… Could you help me, please?
Hi Analeite.
I have noticed same question says 12/04/2024 but in the event viewer it is actually 12/04/2023. Use that of 2023 to answer the question and make sure you specify if it’s AM or PM in your answer. This worked for me.
I am having trouble with the same issue and I tried everything and still not working
The dates provided by the exercise are not correct when you try Wazuh. But if you try different dates and search for “User Account enabled or created alert”, you end up finding the answer.