The data sources that the Logon Tracker module uses are Windows event logs and Linux logs.
This section provides more details on Windows event logs and Linux events logs that are relevant to lateral movement, and how they are represented by the Logon Tracker module.