Windows Security · lesson 5 of 9 · 12 min

Event Viewer fundamentals

summary: Event Viewer records Windows activity that can support troubleshooting and investigation. Focus on the event source, event ID, timestamp, and account involved.

question: Which detail helps connect events in an investigation?

options:

• Timestamp
• Desktop theme
• Screen size
• Mouse speed

correct: Timestamp

explanation: Timestamps help build a reliable sequence of events.

---

Previous lesson: Windows Defender and updates
Back to Windows Security
Next lesson: Event Viewer and logs