Post #1958968

@cR0w Had some enjoyable conversations this week. Me: Do we feel this windows event ID is important? Them: Yes, it could be an indicator of recon. Me: It sure could, but we have xyz covering that. This event costs us $10,000 a year. Is it worth that? Them: No.