Document Details

The documentation page lists ASIM parsers for a wide range of sources, including both Windows and Linux systems. However, Windows-centric sources (e.g., Microsoft Windows Events, Sysmon for Windows, Microsoft Defender XDR, Windows Security Events) are consistently listed and described in detail, often before or with more specificity than their Linux equivalents. Windows-specific tools and event IDs are frequently referenced, while Linux sources are present but less emphasized and sometimes grouped generically (e.g., 'Linux sshd activity reported using Syslog'). There are no explicit PowerShell examples or commands, but the overall structure and detail favor Windows environments.