From cd9e4bcf5654619d268c423c38518df10c6bbde1 Mon Sep 17 00:00:00 2001 From: Frank Xu Date: Mon, 25 Jan 2021 16:31:14 -0500 Subject: [PATCH] add stix --- STIX_external_reference/readme.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/STIX_external_reference/readme.md b/STIX_external_reference/readme.md index f61fbee..4a0d3fd 100644 --- a/STIX_external_reference/readme.md +++ b/STIX_external_reference/readme.md @@ -59,3 +59,8 @@ "Computer": "DC01.contoso.local" } ``` + +references: + +- https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4608 +- [Event Logging Structures](https://docs.microsoft.com/en-us/windows/win32/eventlog/event-logging-structures?redirectedfrom=MSDN)