I recently read two articles with interesting windows events to monitor involving Software and Service installations, Kernel Erros, External Medias and so on.
For monitoring and alerting based on that I would need to distribute winlogbeat to users's workstations.
Would like to know if anyone worked with something similar using winlogbeat, or if I'm just working on a solution that already exists or there's an easier way.
Thanks