Step 7: Configure Windows Event Logs

Windows records system events, software changes, and some system setting change occurrences in the Windows Event Logs. By default these logs clear events older than 7 days because the log size is too small.

If your computer becomes compromised, keeping more logging information increases the chances that experts will be able to determine how and when the compromise occurred. This information is also useful in diagnosing other system and performance problems.

To increase the log size, follow these steps:

1. Click Start > Control Panel.
2. Double-click Administrative Tools and then Event Viewer.
3. In the left pane, select Application.
4. Choose Action > Properties.
5. Set the following:
   • Maximum log size: 10240KB
   • Select Overwrite events as needed
6. Click OK to save the settings.
7. Repeat Steps 3 through 7 for Security and System. Then, close the window.
   

Step 8: Configure Local Security Auditing Policies