CourseTechnology
Set up a SIEM forwarder for Windows on Docker
By External Provider
About this course
This is a self-paced lab that takes place in the Google Cloud console. In this lab, you configure a SIEM forwarder on a Windows VM using a standard Docker image. You use labels to add searchable metadata to the logs to optimize analytical capabilities.
What you will learn
- Perform a basic installation of Docker on a Windows host.
- Install and configure the Chronicle forwarder on Windows. Send sample logs using the file collector.
- Install and configure NXLog Community Edition on Windows. Send Windows Logs to the Chronicle Forwarder using NXLog .