Forum Discussion

m0l0ch's avatar
m0l0ch
Copper Contributor
Mar 14, 2019

How to add 'Microsoft-Windows-Sysmon' events to table 'SysmonEvent'?

Hi everyone. How to add 'Microsoft-Windows-Sysmon' events to table 'SysmonEvent'? I've try to setup it in my env w/ Win10, but Sysmon logs collected to 'Events' table only. What I did wrong?   E...

Resources