Closed nwf9 closed 7 years ago
Hi,
Do you have test to ingest directly a forwardevents.evtx extract from a Windows Events Forwarding Collector ?
Regards
I have not tested this. But, if it is .evtx, I think it should be fine as long as it is in the specified path directory.
Hi,
Do you have test to ingest directly a forwardevents.evtx extract from a Windows Events Forwarding Collector ?
Regards