This may be a long shot, but we have been trying to work with our security team so we can help them monitor for event logs when someone uses Client Drive Redirection (e.g. user maps their local drive to remote VM so they can access files). From what I can tell, the only logging that shows a user added a new drive is found on the user's computer where the Horizon Client is installed.
Is there a method of remotely collecting these logs that anyone has discovered? Since most of the Horizon Clients are installed on our users' personal devices, installing a log forwarding solution is not a viable solution.