What data XDR is taking for correlation? (For example : Like Microsoft Sentinel takes AD logs and security events)

[S.Khurana]

What data XDR is taking for correlation? (For example : Like Microsoft Sentinel takes AD logs and security events) Kindly share any relevant document also if available. 

[BPry]

@S.Khurana,

You can find a list of all of the data collected from endpoints HERE. Keep in mind that operating system and licensing levels will determine the information that is collected and reported. There's a whole lot of information tied into XTH, part of that are the event logs that you appear to be after.