Hello,

I would like to receive windows logs in my SIEM when powershell commands are run...I activate logs on servers and they are stored in "Applications and Services Logs->Microsoft->Windows->Powershell->Operational" (see Event Viewer Windows Server 2012R2)

Is it possible to do that?

Thanks for your input

David