MicrosoftADFS

Microsoft AD FS Collection Windows

Details

IDMicrosoftADFS
OSWindows
Profile TypeWINLOGBEAT
From XDR Version3.5.0
Supported Modulesxsiam

Source

MicrosoftADFS.yml MicrosoftADFS.json
Download History Raw 
winlogbeat.event_logs:
- name: AD FS Auditing
  processors:
  - add_fields:
      fields:
        vendor: microsoft
        product: adfs
- name: AD FS/Admin
  processors:
  - add_fields:
      fields:
        vendor: microsoft
        product: adfs
supportedModules:
- xsiam