Skip to content
cyber-triage-logo
Primary Menu
Platform
Workflow
Benefits
Why Cyber Triage
Compare Versions
Cyber Triage for Teams
Cyber Triage for Enterprise
Key Features
The Collector
Automated Analysis
Malware Detection
Ransomware Detection
Server API
EDR
EDR + Cyber Triage
EDR Evasion 101
Integrations
EDR Powershell Script
Integrated Capabilities
Malware Scanner for Autopsy
Use Cases
SOC Endpoint Investigation
Consultants
SOC DFIR Teams
Law Enforcement - Intrusions
Law Enforcement - ICAC (Trojan Defense)
Pricing
Buy Cyber Triage
Buy Malware Scanning Boosts
Buy Autopsy Malware Scanner Module
Buy Rapid Endpoint Triage Service
Resources
DFIR Education
Blog
Training
Webinars
Product Videos
Intro to DFIR Blog Series
Case Studies
How to Bridge the EDR/Forensics Gap
How to Scale IR Collaboration
How to Escalate to IR with Confidence
How to Speed Up Client Investigations
Recent Releases
3.18 (More MCP & Cloud Functions)
3.17 (MCP & GenAI)
3.16 (Enterprise Tier)
3.15 (Defender Telemetry, Access Control, IRIS)
About
About
Team
Contact
Start Free Trial
Windows Network Logon Session
DFIR Next Steps: What to Do After You Find a Suspicious Windows Network Logon Session
March 15, 2024
Start Reading
