Sysmon, Winlogbeat, and Security Onion!
Channel: Security Onion
Date: 2021-12-14

This video covers the installation of Sysmon and Winlogbeat on a Windows host to provide powerful endpoint telemetry to your Security Onion deployment!

Documentation:
https://docs.securityonion.net/en/2.3/sysmon.html
https://docs.securityonion.net/en/2.3/beats.html

If you have questions or problems, please start a new discussion at https://securityonion.net/discuss

Thanks!