1.2 Native Windows Event Forwarding

Time

1 hour 21 minutes

Difficulty

Beginner

CEU/CPE

Create Free Account

2.1 Group Policy for Event Collection

2.2 Microsoft System Monitor (SysMon)

2.3 Which Events to log for the Threat Hunt Part 1

2.4 Which Events to log for the Threat Hunt Part 2

3.1 Configure Windows Event Collector (WEC) Part 1

View All

In this course we will learn about an approach to collect events from windows devices in both normal operations and when an intrusion is suspected. We will use Windows Event Forwarding (WEF) natively built into Windows for Incident detection while sharing our learnings and step-by- step instructions with WEF configuration and management workflows.

View Course