Senior Security Analyst / SOC / Blue teamer / Detection specialist
A repository for using windows event forwarding for incident detection and response