Device Configuration for sending Threat Logs to a SIEM

• Microsoft Windows
  • SYSMON – https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon
  • Windows Local and Group Policy / ADM files
  • Powershell
  • File System