We have some endpoints that are using Windows Defender managed via SCCM
as their AV solution, for...some reason. Is there a correct way to
centralize logs from these clients (ie detections, scan results, etc.)
into Netwitness? I have a sneaking suspi...