Log sources tagged endpoint

Log sources tagged endpoint. Browse source profiles associated with endpoint.

Matching source profiles

Sysmon · xml

Sysmon records process creation through its Windows Operational channel.

Sysmon · xml

Sysmon records network connection through its Windows Operational channel.

Sysmon · xml

Sysmon records image loaded through its Windows Operational channel.

Sysmon · xml

Sysmon records createremotethread through its Windows Operational channel.

Sysmon · xml

Sysmon records registry value set through its Windows Operational channel.

Sysmon · xml

Sysmon records dns query through its Windows Operational channel.

Sysmon · xml

Sysmon records file deletion archived through its Windows Operational channel.

macOS · json

Unified Logging exposes structured application and operating-system messages with subsystem and process context.

osquery · json

Scheduled query differential results describe rows added or removed relative to the query’s prior state.