MicrosoftECM

Microsoft Endpoint Configuration Manager Windows

Details

IDMicrosoftECM
OSWindows
Profile TypeSTANDARD
From XDR Version3.5.0
Supported Modulesxsiam

Source

MicrosoftECM.yml MicrosoftECM.json
Download History Raw 
filebeat.inputs:
- type: filestream
  enabled: true
  paths:
  - "C:\\Program Files\\Microsoft Configuration Manager\\Logs\\*.log"
  processors:
  - add_fields:
      fields:
        vendor: msft
        product: ecm
supportedModules:
- xsiam