Ingesting Sysmon Event Logs

Ingesting Windows Event Logs

Reference: EDR Events

EVTX

Reference: Endpoint Agent Commands

Windows Event Log

Endpoint Protection

Windows Event Logs

IIS Logs

Sysmon Comparison

Ingesting Defender Event Logs

VDI & Virtual Machine Templates

Payloads

Endpoint Agent Uninstallation

Agent Deployment via Microsoft Intune

Building a custom MSI installer for Windows

Endpoint Agent Installation

Windows Agent Installation

Endpoint Agent Commands

Endpoint Agent