Hacks4Snacks / windows-nxlog

Guidance for implementing NxLog.

Windows NXLog Deployment Guidance

The purpose of this repository is to provide tools and guidance for a basic implementation of NXLog.

Advisory

This respository is still very much a work in progress.

Disclaimer: Please ensure proper testing is preformed prior to applying guidance within this repository into a production environment.

NXLog vs. Windows Event Forwarding

In progress.

How To Use This Repository

1. Create a line delimited file with target computer names for installation.
2. Download the script from this repository.
3. Review the script and modify the function variables to the appropriate values.
4. Run the script.
5. Review SIEM or log collection target to validate expected ingestion.

Source Material

In progress.

Contributing

Please submit all improvements, contributions, and fixes as a GitHub issue or a pull request.

Additional Information and Guidance

• Windows Event Log Reference