Merge pull request #6481 from MaratMussabekov/patch-137

added a tip about Windows Event Forwarding
This commit is contained in:
Beth Levin 2020-04-13 11:05:28 -07:00 committed by GitHub
commit 9d85dc1c08
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -58,6 +58,9 @@ Event ID | Description
1124 | Audited controlled folder access event
1123 | Blocked controlled folder access event
> [!TIP]
> You can configure a [Windows Event Forwarding subscription](https://docs.microsoft.com/windows/win32/wec/setting-up-a-source-initiated-subscription) to collect the logs centrally.
## Customize protected folders and apps
During your evaluation, you may wish to add to the list of protected folders, or allow certain apps to modify files.