Standards & References

NIST SP 800-92: Guide to Computer Security Log Management
CIS Benchmark Section 17: Advanced Audit Policy Configuration
NSA/CISA Event Forwarding Guidance: Recommended events for Windows monitoring
Palantir WEF Config: https://github.com/palantir/windows-event-forwarding
SANS Windows Logging Cheat Sheet: https://www.sans.org/posters/