A repository for using windows event forwarding for incident detection and response
Role in this project:
Security Engineer Contributions:6 commits, 1 PR in 1 day
Contributions summary:Andy primarily contributed to a PowerShell script designed to forward Windows Event Log data, likely for security incident detection and response. Their work focused on enhancing the script's functionality by adding logic to enumerate local group members, updating field delimiters, and fixing errors in the `Write-EventLog` parameters. They also refined how the domain FQDN is retrieved and removed redundant variable printing.
forwardingwindows-serverwindowsincident-responseocto-correct-managed
Contributions:25 commits, 25 pushes, 2 branches in 2 years 5 months