Configure an Active Directory Sensor
- Configure an Arctic Wolf GPO Advanced Audit Policy.
- Install NXLog on each DC.
- Install Active Directory Sensor on each DC.
- Install Arctic Wolf Agent on each DC.
- Install Sysmon on each DC.
- Optional: Configure auditing for ADFS.
- Optional: Active Directory decoy accounts.