Configuration files for Winlogbeat
Included configs
Palantir.yml
Includes most (not all) of the WEF subscriptions found in the Palantir Windows Event Forwarding repo (link: https://github.com/palantir/windows-event-forwarding/tree/master/wef-subscriptions). Note: does not implement any form of advanced filtering (e.g. https://github.com/palantir/windows-event-forwarding/blob/master/wef-subscriptions/Authentication.xml#L48 )