[WINLOGBEAT] - Event :Delete folder or file

ekaduk
Fri, 20 Mar 2020 10:51:12 +0000
Beats

Hi, I'm a newbie user.
I'd like to know if it could be possible to register a deletion of a file/folder in Windows, and then register it with winlogbeat.
I've read the documentation about winlogbeat and I can't find something that goes down to the thing of file or folder deletion. What I have also read is this topic -> https://www.elastic.co/es/blog/monitoring-windows-logons-with-winlogbeat
which is kind of a "nice to show" but "not clearly documented".
Could you give me a grasp of understanging? Am I missing some obvious thing?
Thanks in advance

5 posts - 2 participants