Windows core
Windows sysinternals
Windows event logs
Sysmon
Osquery basics
Wazuh
Wazuh.
Find indicators of a threat or security breach