$ whoami
Windows Analysis
Event Logs
Hunting with Elastic
Hunting with Splunk