palantir / windows-event-forwarding

A repository for using windows event forwarding for incident detection and response
Other
1.22k stars 268 forks source link

Major overhaul. #17

Closed cryps1s closed 6 years ago

cryps1s commented 6 years ago

Substantial overhaul and audit of current WEC channels and WEF subscriptions.

Note: This release removes a handful of old WEC channels (e.g. file-system). It is recommended to perform a full re-install of channels and subscriptions if re-deploying.