What file and registry path is required for Windows Splunk Universal Forwarder?
Looking to deploy Unified Write Filter (UWF) to harden kiosks/shared Windows workstations. UWF works by redirecting all non-approved file and registry write to temporary memory which is wiped out by a reboot.
We need to identify the file and registry locations which Splunk Universal Forwarder (UF) requires so it can be excluded from UWF.
