why not this event over netstat? Expand / Collapse
Author
Message
Posted 2/4/2019 12:08:41 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 2/4/2019 5:59:55 PM
Posts: 1, Visits: 3
I've always understood that netstat only provides data on the current network connections. If windows event 5158 logs all port binds, why would I ever care about netstat? Seems I would be better off searching logs for a previous port bind

Unfortunately, I can see that this event is not getting logged. So maybe part of the problem is that port binds are not logged by default? Still seems it would be a best practice to do so.
Post #8540
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 8:20pm