Monitor Event IDs

amir

Hi Geeks,

I have a question regarding monitoring workstation issues. I've set up threshold profiles to monitor various events and receive alerts if something goes wrong.

Does anyone know which events are most important to monitor for security threats and system corruption? Also, what are the best practices for setting up these alerts in regard to event viewer id?

Thank you!