# Security Monitoring & SIEM Fundamentals

- [Failed Logon Attempts (All Users)](/mynotes/certifications-and-notes/blue-team/soc-analyst/security-monitoring-and-siem-fundamentals/failed-logon-attempts-all-users.md)
- [Failed Logon Attempts (Disabled Users)](/mynotes/certifications-and-notes/blue-team/soc-analyst/security-monitoring-and-siem-fundamentals/failed-logon-attempts-disabled-users.md)
- [Successful RDP Logon Related To Service Accounts](/mynotes/certifications-and-notes/blue-team/soc-analyst/security-monitoring-and-siem-fundamentals/successful-rdp-logon-related-to-service-accounts.md)
- [Users Added Or Removed From A Local Group (Within A Specific Timeframe)](/mynotes/certifications-and-notes/blue-team/soc-analyst/security-monitoring-and-siem-fundamentals/users-added-or-removed-from-a-local-group-within-a-specific-timeframe.md)
