matthew/DCO-SOGs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
a0389c78354c7405c9c2f71dfc9602c62b3e8855
DCO-SOGs/3 DC/Agents/1) DCO_GPO_CUSTOMER.md

665 B
Raw Blame History

sysmon

sysmon config

inputs for splunk

splunk universal forwarder

elastic agent

Event Logs

  • process tracking #enables CMD logging
  • enable wmi
  • enable powershell remoting
  • Audit Policy