Operations | Monitoring | ITSM | DevOps | Cloud

Windows

Why You Should Avoid Windows Group Policy Management for CIS Compliance

Windows Group Policy Management is the default — but that doesn’t mean it’s the right fit for your organization when it comes to cybersecurity and compliance. In this blog, we’ll look specifically at the current standard for compliance through CIS benchmarks and offer up a new way to approach policy management without the default.

Monitor Windows event logs with Datadog

Whenever an event occurs on your Windows machine, the operating system records an event log that includes details about the nature of the event (e.g., critical runtime error) or security identifiers (for audit events). Windows event logs not only record system and application activity but also user actions and background processes, making them an invaluable tool for monitoring the security and health of your systems.

How we improved testing Ubuntu on WSL - and how you can too!

As the popularity of Windows Subsystem for Linux increases, the Ubuntu development team is committed to delivering a first class experience for Linux developers on Windows. To achieve this we’ve made improvements to our automated testing workflows via the creation of WSL-specific GitHub actions. In this post, Ubuntu WSL engineer Eduard Gómez Escandell talks us through the motivation for this approach and how you can implement these actions for your own CI workflows.

What is Windows Event Log?

Event logging for Microsoft Windows provides a standard, centralized way for applications and the operating system to record important software and hardware events. The event-logging service (eventlog) stores events from various sources in a single collection called an event log. The system administrator can use the event log to help determine what conditions caused the error and the context in which it occurred. TechTarget have an excellent overview of Windows event logs available.

How to Monitor Your Windows Infrastructure

Nowadays many organizations still rely on classic Windows servers and virtual machines (VMs) for their business applications. Although Kubernetes is a trending topic, not everything running in the cloud is a container-based application. When it comes to monitoring Windows applications and infrastructure, many businesses leverage OSS Prometheus to get Windows metrics via its Prometheus Windows Exporter.

Patch Windows Common Log File System Driver Vulnerability (CVE-2023-23376)

As the digital world becomes more interconnected, cyber threats evolve and become more sophisticated, putting businesses and individuals at risk. On February 14, 2023, Microsoft announced a critical vulnerability in the Windows Common Log File System (CLFS) driver, known as CVE-2023-23376. This vulnerability allows attackers to elevate privileges and gain unauthorized access to sensitive data, potentially resulting in severe consequences for affected systems.