Event Logging Group Policy for Wazuh or AlienVault

6th September 2022

Do NOT turn on Audit Privilege Use = FAILURE or you will Denial of Service yourself with the flood of useless events. Chrome.exe creates multiple events per minute while working properly.

I filled a 200GB Wazuh DB before figuring this out, and had to rebuild Wazuh.