3.3 Scaling and Performance of Windows Event Collection

In this course we will learn about an approach to collect events from windows devices in both normal operations and when an intrusion is suspected. We will use Windows Event Forwarding (WEF) natively built into Windows for Incident detection while sharing our learnings and step-by- step instructions with WEF configuration and management workflows.