Infosec quotes - endpoint logging

“.. roadblock lies in the fact that many organizations are diligent about recording the Windows Domain Controller logs, however, they do not store the logs coming from desktops and laptops ... to detect the lateral movement, a stitching is necessary between the Domain Controller logs and the endpoint logs...”

https://www.infocyte.com/blog/2018/1/15/3-challenges-of-using-log-analysis-for-threat-hunting