This pack is targeted for collections of Window events in the Classic or newer XML format. For events in the Classic format, sometimes the Message field contains XML.
HF Server Events is a Powershell script that creates and configures the: SQL Server Database, Forwarder Subscriptions, Schedulated Tasks and the Domain Controllers to centralize and store the events recommended by Microsoft.
Windows Event Threat Navigator: Quick reference linking Windows/Sysmon events to MITRE ATT&CK®
Powershell script switch proxy on event 8001 by Journal Microsoft-Windows-Wan-AutoConfig/Operationnal, Source : Wan-AutoConfig Windows
Blocks failed RDP login IPs using the routing table instead of Windows Firewall. Ideal for systems with firewall disabled for performance reasons.
Forward Windows Events to syslog server
Add a description, image, and links to the windows-events topic page so that developers can more easily learn about it.
To associate your repository with the windows-events topic, visit your repo's landing page and select "manage topics."