Start free

Browse › Threat Intelligence & Defense

Event Logs with Autopsy

Scored lab

Part of Threat Intelligence & Defense Topic: Blue Team

Counts towardsCompTIA CySA+ badgeCompTIA SecurityX badgeCompTIA SecAI+ badge

Access

Included in StationX Membership — unlimited attempts

🔒 StationX Membership — $299 / year ($24.92/mo billed annually)

Already have access? Sign in.

New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.

What you'll do

In this hands-on lab, students will learn the fundamentals of Windows Event Logs, including their purpose, structure, and the types of information they contain.

  • They will use Event Viewer to examine logs on a live system and identify relevant events.
  • Students will then use Autopsy to extract event log files from a forensic disk image and load them into Event Viewer for analysis, gaining practical experience working with both live and acquired evidence sources.

Scored lab. A scored lab checks your work and records a score you can see on the lab page.

Roadmaps that use this lab