Cybersecurity Detection Lab: Forwarding Windows Event Logs to Splunk Using Universal Forwarder

preview_player
Показать описание
In this video, I walk through how to add Download and Install the Splunk Universal forwarder and forward logs from a Windows Domain Controller to a Splunk Enterprise Instance.

___________________________________________
RESOURCES:

______________
JOIN CYBERWOX ACADEMY ON DISCORD!

CHECK OUT CYBERWOX ACADEMY'S WEBSITE

CHECK OUT CYBERWOX ACADEMY ON YOUTUBE!

I hope you like this video! Please like, comment(ask me anything, I’m more than happy to help!), and subscribe:
_____________
ABOUT ME
Hey there ~ I’m Day, I work as a Security Engineer. I make videos about cybersecurity, college, internships, certifications, and whatever else is on my mind. Thanks so much for watching :)
_____________
COLLABORATIONS & CONTACT
IG & Twittter: @daycyberwox

________________________________________________

________________________________________________
MY DESK COMPONENTS

iPad - 10.9-inch iPad Air Wi-Fi 256GB - Rose Gold
MacBook - 13-inch MacBook Pro - Space Gray, USB-C to USB Adapter

________________________________
DISCLAIMER:

This video description has some affiliate links and I may receive a small commission for purchases made through these links. Thank you for your support!
Рекомендации по теме
Комментарии
Автор

I finally completed this project! 🥳🥳 This was an amazing project to get hands-on with and troubleshoot. Can't wait to play around more later. Thanks Day!

gavinpaultech
Автор

Great video! I’ve been looking for someone to go through the process at a steady pace and you have done a excellent job of that. I will definitely be keeping an eye out for newer videos. Keep it up!

vivalaheadshot
Автор

Hi there, I installed the universal forwarder on windows, installed the microsoft TA too, currently I am able to capture Registry logs but in the logs i receive in splunk indexer, the user who did the action is not in the logs. can you help me pls?

mohammadjawadstan
Автор

can we use in collect to forward logs to splunk

rohitraj
Автор

Awesome video! I've been trying to figure out how this worked

samuelborthwick
Автор

Thanks so much for this. Could you share your steps with me

enochagyepong
Автор

After doing lab setup how we can see AD logs like creation of user or adding to group in splunk...

RahulVerma-jpff
Автор

I couldn't connect to the wifi in the Domain Controller. I've done everything you have so far but I have no wifi. Any suggestions?

ildaragishev-yviu
Автор

i didn't find the AD in the splunk forworder

ksamloos
Автор

HELP, I can't see the "local event logs" option in my splunk interface. From 12:45

johncambry
Автор

How are you connected to the wifi in the Domain Controller? I've done everything you have so far but I have no wifi, so I can't install universal forwarder

Joangelis