DCR stream choice: Microsoft-CommonSecurityLog vs Microsoft-Syslog

This sheet compares Microsoft-CommonSecurityLog, Microsoft-Syslog.

CriterionMicrosoft-CommonSecurityLogMicrosoft-Syslog
CarriesCEF-formatted messagesPlain syslog messages

The verdict, the full comparison, 4 rules and 2 traps are part of SC-200 access. Unlock SC-200.