Overview

This pack processes Windows Event Logs sent to Exabeam and filters to codes Exabeam parsers use, keeping raw XML intact for parsing.

What this pack does:

• Keeps raw XML intact
• Keeps Sysmon and PowerShell logs
• Drops unused Security codes