locked
EMET Enterprise Rollup Reporting Guidance RRS feed

  • Question

  • Looking for any documentation or guidance on enterprise level reporting of EMET events (i.e. centralized view of EMET events across devices). Any direction would be appreciated.
    Thursday, August 7, 2014 6:36 PM

All replies

  • EMET logs the events in the local application event log. I'm not ware of any built-in enterprise level reporting of EMET events. However it is possible to use a centralized event log monitoring systems, such as Microsoft Systems Center Operations Manager (SCOM) 2012, for enterprise-wide logging of EMET events. With such an system you can monitor exploit attempts and/or EMET compatibility problems and create reports or alerts.


    W. Spu

    Friday, August 8, 2014 7:25 AM
  • You can configure Microsoft Event Forwarding and filter out the relevant logs you want to see from EMET.  They will be sent to a collector machine.
    Thursday, September 4, 2014 9:47 PM