Ingesting Linux Audit Logs

Ingesting Sysmon Event Logs

Ingesting MacOS Unified Logs

Ingesting Windows Event Logs

Reference: EDR Events

Tutorial: Ingesting Telemetry from Cloud-Based External Sources

Reference: Platform Events

Sysmon Comparison

Ingesting Defender Event Logs