I do not need a solution (just sharing information)
Hi,
Are any customers collecting Windows logs from your endpoints with SSIM (or some other tool)? If so, how are you collecting them, how long do you keep them, and do you handle (analyze, correlate, store, retain) them the same way as Windows server logs?