Splunk EnterpriseWazuh Windows Event LogsSysmon Active DirectoryPowerShell NetworkingSPL