Skip to main content
IsuruTharanga
Visitor III
April 2, 2020
Question

FortiSIEM - Windows Powershell

  • April 2, 2020
  • 2 replies
  • 788 views
Hi,

We are trying to integrate Windows PowerShell logs using the FortiSIEM Windows agent and currently, we have configured Powershell Operational logs. But we have an issue with the given Windows Powershell Event logs where they are not parsing.

We would like to know whether the issue is with our configuration or a parser.

Cheers,
Isuru

    2 replies

    FSM_FTNT
    Staff
    Staff
    April 2, 2020
    Hi Isuru,

    Do you have any sample events that you can share?

    Thanks

    Dan-------------------------------------------
    Original Message:
    Sent: 04-02-2020 02:40
    From: Isuru Tharanga
    Subject: FortiSIEM - Windows Powershell

    Hi,

    We are trying to integrate Windows PowerShell logs using the FortiSIEM Windows agent and currently, we have configured Powershell Operational logs. But we have an issue with the given Windows Powershell Event logs where they are not parsing.

    We would like to know whether the issue is with our configuration or a parser.

    Cheers,
    Isuru
    IsuruTharanga
    Visitor III
    April 2, 2020
    Hi Dan,

    Please find the Sample Logs herewith.

    Cheers,
    Isuru-------------------------------------------
    Original Message:
    Sent: 04-02-2020 04:53
    From: Daniel Hanman
    Subject: FortiSIEM - Windows Powershell

    Hi Isuru,

    Do you have any sample events that you can share?

    Thanks

    Dan
    Original Message:
    Sent: 04-02-2020 02:40
    From: Isuru Tharanga
    Subject: FortiSIEM - Windows Powershell

    Hi,

    We are trying to integrate Windows PowerShell logs using the FortiSIEM Windows agent and currently, we have configured Powershell Operational logs. But we have an issue with the given Windows Powershell Event logs where they are not parsing.

    We would like to know whether the issue is with our configuration or a parser.

    Cheers,
    Isuru
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.