1. Targets to collect data from 2. Credentials to use 3. Data to collect - Event Logs - All - Specify - AD Info - Templates: Users, Computers, etc - Custom Scripts (WinRM) - WMI Scripts