FortiSIEM - Windows Defender Logs

[isuru]

Hi,

I would like to know whether there is a parser for Windows Defender Operational/WHC Logs

Cheers,
Isuru

[HugoPinto]

Hi Isuru,

Just for Windows Defender ATP.

Cheers

[isuru]

Hi Hugo,

Sorry for the late response. Not the ATP Logs (I saw there is a parser for that). I was looking for a parser related to the Endpoint Logs from Windows Defender.

Cheers,
Isuru

[HugoPinto]

Hi Isuru,

One question about this, are you collecting the Windows Defender Log via WUA Agent?

Cheers,
Hugo Pinto

[isuru]

Hi Hugo,

Yes. I was asking about the windows defender logs.

Cheers,
Isuru