Feb. 17, 2022, 9:58 p.m. | /u/antmar9041

Computer Forensics www.reddit.com

Hi

Just wondering if any enterprise size companies are running sysmon on workstation and/or servers and forwarding the event to some sort of logger/SIEM? What are the pros and cons?

computerforensics forwarding siem sysmon workstations

Product Regulatory Compliance Specialist

@ Avery Dennison | Oegstgeest, Netherlands

Cyber Security Analyst

@ FinClear | Melbourne, Australia

Senior Application Security Manager, United States-(Virtual)

@ Stanley Black & Decker | New Britain CT USA - 1000 Stanley Dr

Vice President - Information Security Management - FedRAMP

@ JPMorgan Chase & Co. | Chicago, IL, United States

Vice President, Threat Intelligence & AI

@ Arctic Wolf | Remote - Minnesota

Cybersecurity Analyst

@ Resource Management Concepts, Inc. | Dahlgren, Virginia, United States