JPCERT Shares Windows Event Log Tips to Detect Ransomware Attacks

The investigation strategy shared by JPCERT/CC covers Application, Security, System, and Setup logs, which can reveal traces left by ransomware attacks and help identify the attack vector