SIEM administrators may wish to create a user login to collect WMI logs without giving that account admin privileges. For detailed steps on how to do this, see KB74126 (https://kc.mcafee.com/corporate/index?page=content&id=KB74126).
For more resources, visit the ServicePortal and search for related content. Also, visit the SIEM Community at https://community.mcafee.com/community/business/siem.
ces.
For more resources, visit the ServicePortal and search for related content. Also, visit the SIEM Community at https://community.mcafee.com/community/business/siem.
ces.