Reference: EDR Events

Windows Event Log

EVTX

Endpoint Protection

Windows Event Logs

Reference: Endpoint Agent Commands

IIS Logs

Sysmon Comparison

Ingesting Defender Event Logs

VDI & Virtual Machine Templates

Ingesting Windows Event Logs

Ingesting Sysmon Event Logs

Payloads

Endpoint Agent Uninstallation

Agent Deployment via Microsoft Intune

Building a custom MSI installer for Windows

Endpoint Agent Installation

Windows Agent Installation

Endpoint Agent Commands

Endpoint Agent