Windows Event Loggingand Forwarding - ACSC | Cyber.gov.au

Each of the event categories below are accompanied by supplied subscription files. The subscriptions are used by Windows Event Forwarding to forward the locally generated events while filtering out the less valuable events. Event Category: Description; Why; Value; Noise; Implementation Notes; Sysmon. Provides visibility of process creation and termination, driver and library loads, network ... ................
................