BluSapphire
search
⌘Ctrlk
BluSapphire
  • Release 6.0
    • Release Notes 6.0
    • 01_Unified Platform Architecture
    • 02_What is OnePlatform?
    • 03_DataStreamer
    • 04_AR2 Agentic AI
    • 05_OneAgent
    • 06_What is SIEMless ?
  • Pilot-PoC
    • Proof-Of-Concept / Pilot Guide
  • M-SOC
    • M-SOC_Self Service Portal
  • Older Releases
    • 01_Introduction
    • 02_Unified Cyber Defense Platform
    • 03_The Stack
    • 04_Features and capabilities
    • 05_Operations
    • 06_Architecture
    • 07_Integration
    • 08_Use cases
    • 09_CaseHub
    • 10_Active-Defense-Services
    • 11_1 Data-Pipeline-Manager (DPM)
    • 12_Deployment / Log Forwarding
      • Log Forwarding (on-prem) - How To
        • Fortimanager
        • Fortinet
        • Cisco ASA with FirePOWER services
        • Cisco ASA
        • Cisco VPN 3000 Concentrator
        • Cisco IOS Switch
        • Cisco ASA using ASDM
        • Cisco Router
        • Cisco Sourcefire
        • Cisco Ironport
        • Cisco Nexus Switch
        • Cisco VPN Concentrator
        • NetScreen Firewall
        • Palo Alto Firewalls
        • Juniper
        • Sonicwall
        • Checkpoint
        • Blue Coat Proxy Logs
        • Tipping Point
        • FireEye
        • Linux
        • UBUNTU
        • CENTOS-RHEL
        • Citrix Access Gateway
        • SYMANTEC AV
        • DarkTrace
        • Nutanix
        • SAP
        • Cisco Meraki Firewall
        • Zoho Vault Integration
        • Zoho Analytics Integration
        • Sophos EDR Integration
        • PowerDMARC Integration
        • Perception Point Integration
        • MS Intune Integration
        • AWS-Cloudtrail & AWS-Cloudwatch integration
        • Dell PowerEdge Log Integration
        • HPE ProLiant DX380 Gen10 Log Integration
        • Lenovo ThinkSystem SR650 Log Integration
        • Aruba-3810M-L3 Switch
        • Cisco HX220C-M5SX Log Integration
        • Aruba-6200F-48-Access Switch
        • Brocade & Ruckus Switch Log Integration
        • Cavera L2 Switch Log Integration
        • CentOS & RHEL Log Integration
        • Cisco L2 Switch Log Integration
        • Cisco L3 Switch Log Integration
        • Dell EMC Switch Log Integration
        • Dell Powervault ME4 & ME5 Series Log Integration
        • HCI_CISCO_HX 240C_M5SX_CIMS(Intersight)
        • IBM AIX Log Integration
        • IBM Storwize Log Integration
        • Lenovo L2 Switch Log Integration
        • Lenovo Think System Storage Log Integration
        • lenovo_think_system_manager_851
        • Netgear M4300 Switch Log Integration
        • Net Gear Ready NAS 314 & Net Gear Ready NAS 428
        • qnap storage log integration
        • Ruckus SmartZone 100 Wi-Fi Controller Log Integration
        • Seqrite Endpoint Security 7.6 Log Integration
        • Suse log integration
        • Ubuntu log integration
        • Vcenter log integration
        • Microsoft SQL DB integration
        • Vios log integration
        • Cisco SF/SG 200 & 300 Series Switches
        • oracle db integration
        • lenovo thinksystem storage
        • F5 BIG-IP Load Balancer (11.x - 17.x)
        • Seqrite 76
        • Seqrite 82
        • Aruba switch log integration
        • Windows FIM
        • Sophos Firewall
        • SAP
        • Integrating Forcepoint Web Proxy (or) Email Security
        • MicroAgent - Winlogbeat & Sysmon
          • MicroAgent manual installation
          • Deploy Winlogbeat / Sysmon Using GPO
        • Microsoft’s IIS Integration
        • vios log integration
        • aruba switch log integration
        • oracle db integration
        • Cisco SF/SG 200 & 300 Series Switches
        • microsoft sql db integration
        • seqrite 82
        • seqrite 76
        • List of Supported Log Sources
      • Cloud Log Forwarding
      • BluArmour Pre-Deployment Checklist & Roll out Process
      • Deploy BluArmour via SCCM
      • BluGenie GPO for Service Account, WinRM and WMI
      • Mirror / SPAN port configuration
      • Average LogSize by LogSource
      • Windows Package Installation
      • Linux Package Installation
    • 13_MITRE ATT&CK
    • 14_BluArmour Endpoint Protection
    • 15_BluGenie
  • 16_Best Practices
  • 17_Threat Hunt
  • 18_Taxonomy
  • 19_Product Videos
  • 20_M-SOC_Self Service Portal
  • Customer Self Service Portal
  • Appendix A
  • 21_Incident Response
  • 22_Release 6
gitbookPowered by GitBook
block-quoteOn this pagechevron-down
  1. Older Releaseschevron-right
  2. 12_Deployment / Log Forwardingchevron-right
  3. Log Forwarding (on-prem) - How To

MicroAgent - Winlogbeat & Sysmon

MicroAgent manual installationchevron-rightDeploy Winlogbeat / Sysmon Using GPOchevron-right
PreviousIntegrating Forcepoint Web Proxy (or) Email Securitychevron-leftNextMicroAgent manual installationchevron-right