Microsoft Windows security auditing setup - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation

Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-11
Category
Administrator Guide

In Traps 6.1.3 and later releases, to enable Cortex XDR to collect Windows event logs, configure the following settings.