Contact
Get in touch
Corrections are the most useful thing you can send. If an entry is wrong or misleading, it is worth telling us about.
Reporting an error in an entry
Include the page address and what is wrong with it. If you have a vendor documentation link that contradicts what is written, that settles it fastest.
Requesting an event
Send the event ID and which log it came from — Windows Security, Windows System, Sysmon, and so on. The same number means different things in different logs, so the log matters as much as the number.
Do not paste real log data. Change addresses, hostnames, and usernames before sending anything, and never send a capture from a system you do not personally own.
What we cannot help with
This is a reference site, not a support desk or an incident response service. We cannot investigate a specific machine, tell you whether a particular system has been compromised, or look at logs on your behalf. If you believe you are dealing with an active incident, talk to whoever handles security for your organisation.