Hunting for threats with Intercept X and the Windows Event Collector