sysmon topic

Open Source EDR for Windows

0xrawsec

系统监控开发套件（sysmon、procmon、edr、终端安全、主机安全、零信任、上网行为管理、沙箱）

wecooperate

A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs

wagga40

Test Blue Team detections without running any attack.

n0dec

Endpoint detection & Malware analysis software

yarox24

Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.

MHaggis

Investigate suspicious activity by visualizing Sysmon's event log

JPCERTCC

Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technical Guidance for Windows Event Logging.

AustralianCyberSecurityCentre

Signature engine for all your logs

0xrawsec

RDLL for Cobalt Strike beacon to silence sysmon process

ScriptIdiot