Event Viewer & Auth Log Hunt

Read Security log events 4624/4625 and recognize PowerShell logging signals in a synthetic lab extract.

This room unlocks when you enrol in a linked course or have a matching Learn plan. No separate lab checkout — practice stays inside the track.