Am looking to get alerts for sysmon events. As these dont appear in system , security or applicaiton lansweeper cant see

MorningIm looking to use lansweeper for alarms / reporting of lateral movement.Any one got anything on lansweeper reports for privilege escalation (ie event ID's 4672 and 4648)File monitoringor anything reporting on sysmon events?these events im tryi...

Morning, there's a few Failed Login Reports templates on here. Ive played with all and "Failed Login Report - 3 day" has proved very valuable to ue.Im looking to get a bit more info from event viewer. In event viewer it sometimes shows Network Inform...

Hi all I currently report on failed backups by having alerts on >Eventid = 517,518,521,546,561 & Source = Microsoft-Windows-BackupWhich works fine for say windows backup, im looking for more in the way of query like a "server audit"Any wan i can get ...