I've been curious about some of the work done by my team related to this and data collection. We do mass event log collection and aggregate it all into Splunk. Some of the sources are sysmon event logs, AD data, and…
I've been curious about some of the work done by my team related to this and data collection. We do mass event log collection and aggregate it all into Splunk. Some of the sources are sysmon event logs, AD data, and…