Standardize & Route Windows Events for Google SecOps
A bundle that standardizes Windows Events for Google SecOps, then routes each channel's log type through its own batch so batches stay homogeneous per SecOps log type.
Pipeline
Pipeline details are currently unavailable.
Related Blueprints
Deduplicate Windows Events Rendering Info
Windows EventsData ReductionDeduplicationNormalization
Enrich FortiGate Security Events
FortigateSecurityEnrichmentMITRE ATT&CK
Enrich Okta Security Logs
OktaJSONSecurityEnrichmentMITRE ATT&CK
Enrich Palo Alto Security Events
Palo AltoSecurityEnrichmentMITRE ATT&CK