Endpoint Protection

 View Only

Tamper Protection External Logging

  • 1.  Tamper Protection External Logging

    Posted May 20, 2020 04:17 AM
    Hi there,

    I have enabled tamper protection on our SEPM & when I check the "monitor's page" I can see that there are regular events occurring. I have even checked an endpoint's local logs and can see the event there too. However, I can't seem to see any event-related activity within our SIEM.

    Our SEPM is configured to forward logs via the External logging section and is configured to send everything with all the checkboxes ticked on the "log filtering page".

    Has anyone got any guidance with this one?