VICTIM NETWORK Windows Server Active Directory Windows 10 Workstation Brute Force Malicious PowerShell Log Forwarder Syslog / UF SIEM Splunk / Sentinel Analyst Console Searches & Alerts