I couldn’t find any pre-configured Dashboards in the Library specifically for Sysmon events collected by the R7 agent.
Is anyone able to share any queries specifically for Sysmon that may be useful to create a Dashboard for?
I couldn’t find any pre-configured Dashboards in the Library specifically for Sysmon events collected by the R7 agent.
Is anyone able to share any queries specifically for Sysmon that may be useful to create a Dashboard for?