Hello Everyone,
I'm ingesting domain controller logs into QRadar. My question is regarding user authentication on a windows machine using local instead of domain name, does the authentication logs printed on the domain controller?
Thanks,
Anand Gulla