Using Evtsys.exe Forward Windows Event Logs to Kiwi Syslog Server

Описание

There are lots of advantages if you can put all your events into one centralized place, such as SIEM. How to forward your windows event logs to a SIEM or syslog server? Here is a simple and easy way, using Eventlog to Syslog utility (evtsys.exe).

This video also shows how to install a free Kiwi syslog server on a Windows 2012 R2 virtual machine. Kiwi Syslog server is used to demonstrate collected syslogs from Windows 7 machine where Eventlog to Syslog Utility installed.

Subscribe me: https://www.youtube.com/c/Netsec?sub_confirmation=1

Reference page:
https://engineering.purdue.edu/ECN/Resources/Documents/UNIX/evtsys

=======================================================
Recording IT life Blog: https://51sec.org