A pragmatic Windows logging baseline: key event sources, retention guidance, and a starter Sysmon config.
