Initial commit - 611 cybersecurity skills across all subdomains

skills/configuring-windows-event-logging-for-detection/references/standards.md

@@ -0,0 +1,6 @@
+# Standards & References
+- **NIST SP 800-92**: Guide to Computer Security Log Management
+- **CIS Benchmark Section 17**: Advanced Audit Policy Configuration
+- **NSA/CISA Event Forwarding Guidance**: Recommended events for Windows monitoring
+- **Palantir WEF Config**: https://github.com/palantir/windows-event-forwarding
+- **SANS Windows Logging Cheat Sheet**: https://www.sans.org/posters/

skills/configuring-windows-event-logging-for-detection/references/workflows.md

@@ -0,0 +1,8 @@
+# Workflows
+## Event Logging Deployment
+```
+[Audit current logging configuration] → [Enable Advanced Audit Policy via GPO]
+  → [Enable command line logging] → [Increase log sizes]
+  → [Configure WEF or agent-based forwarding] → [Verify events in SIEM]
+  → [Build detection rules from high-value events] → [Quarterly logging audit]
+```