> For the complete documentation index, see [llms.txt](https://ajmal-anwar.gitbook.io/zyberspace-by-ajmal/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ajmal-anwar.gitbook.io/zyberspace-by-ajmal/zyberlab/03-windows-security-basics/windows-security-basics.md).

# Windows Security Basics Overview

This section begins the first hands-on security exercises in ZyberLab.

The goal is to use the Windows and Active Directory environment already created to understand how Windows records security activity, how authentication events appear, and how basic security controls can be reviewed.

## What You Will Learn

You will work with:

* Windows Event Viewer
* the Windows Security log
* successful and failed logons
* account lockout events
* Windows Defender Firewall
* local and domain accounts
* basic audit policy

## Lab Systems

```
DC01        Domain Controller
CLIENT01    Domain-joined Windows client
```

For most exercises, generate normal activity on `CLIENT01` and review the resulting events locally or on `DC01`, depending on where the action occurred.

## Learning Approach

For each exercise:

1. perform one simple action
2. observe what Windows records
3. identify the important event fields
4. understand why the event matters
5. document what you learned

The objective is not to memorize event IDs. It is to understand how activity becomes evidence in Windows logs.

## Important Rule

Only generate test activity inside the ZyberLab environment. Do not deliberately trigger failed logons, lockouts, firewall changes, or other security events against systems you do not own or have permission to test.

## Recommended Order

1. Event Viewer Basics
2. Windows Security Log
3. Successful Logons
4. Failed Logons
5. Account Lockout
6. Windows Defender Firewall Basics
7. Local vs Domain Accounts
8. Basic Audit Policy

After this section, ZyberLab will move from basic Windows logging into more focused security monitoring and investigation.