Hello, if I add both integrations (system and windows) in Fleet, for the same policy, will there be duplication of logs?
Here;s what System collects:
Here's what Windows integration collects:
Is Sysmon included in System? Also, is there overlaps in what both integrations do and what happens if I put both of them in the same policy? Should I turn off anything to avoid duplication?