We are excited to announce the culmination of project Wildfire - the biggest enhancement we have ever made to Supercharger. Wildfire helps you keep pace with the need for constant vigilance of endpoints and the migration from AD/Group Policy managed workstations to the modern Entra-joined PC.
Wildfire empowers you to
- Get the same agentless log collection for Entra-joined, Intune-managed Windows devices as you have always had for classic AD/Group Policy managed Windows systems.
- Forward logs over the Internet. Keep those security logs flowing no matter where you Windows PCs are. As long as the computer has Internet access you can maintain vigilance of what is happening on it - whether it is at the office, working from home, at a client or traveling.
With Wildfire, Supercharger now
- Can load balance Entra-joined Windows devices by querying Microsoft Graph for Windows devices and assigning them to WEC collectors by their DNS name. You can scope which Windows devices are assigned by Entra group membership or other attributes on the Device object in Entra.
- Helps you implement both server (collector) and client (forwarder) certificate authentication for WEC scenarios where Kerberos is unavailable such as non-AD member computers and WEC over-the-Internet.
- Provides you with the exact Intune Configuration Policies and Detection and Remediation Scripts to ensure your Windows devices are configured to find and authenticate to your WEC collectors.
Supercharger guides you step-by-step through (and automates much of) the complex process of configuring WEC collectors for certificate-based authentication, connecting to your Entra ID tenant, deploying client certs to your Entra-joined PCs and configuring them to target your WEC collectors via Intune. You can setup a load balancer comprised of multiple collectors to accepts events from tens of thousands of Windows devices based on Microsoft Graph queries of Entra-joined Windows devices and/or computers from your AD domains.
Along with Wildfire, we are announcing a new resource at www.LOGbinder.com - the WEC Encyclopedia which explains every aspect of Windows Event Collection and documents the knowledge we have gleaned through years of helping customers manage large WEC installations.
Most articles in the WEC Encyclopedia end with a section entitled "How Supercharger Helps..." and to learn more about the new features in Wildfire check out https://www.logbinder.com/WindowsEventCollection/WithEntraJoinedWindows11 or sign up to watch here.
As endpoint security risks continue to grow and companies migrate to the "modern" PC, Supercharger is there to help you maintain vigilance and compliance at the endpoint without agents.