Reference: EDR Events

Ingesting MacOS Unified Logs

Tutorial: Ingesting Telemetry from Cloud-Based External Sources

Reference: Platform Events

Ingesting Linux Audit Logs

Sysmon Comparison

Ingesting Defender Event Logs

Ingesting Windows Event Logs

Ingesting Sysmon Event Logs