Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: We have a requirement to audit all Applocker EXE and DLL events on all of our servers; how do I set up LEM to make this information available and prominent?

$
0
0

Ohhh - the AppLocker Event Log itself (duh). There is a separate connector to monitor that event log directly.

 

You will also need to do some magic to make the connector hook up to the log - it's looking for Microsoft-Windows-AppLocker/EXEandDLL (note the spaces are removed). I don't know what these steps are and don't see them here on Thwack or in the KB so you might have to check with support.


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>