WINDOWS EVENT FORWARDING GUIDANCE

Summary from the TLDR InfoSec newsletter

A repository for setting up Windows Event Forwarding on a Windows server in an Active Directory environment. The repository includes GPOs, WEF subscriptions, and WEC channels.